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COBOL, RPG Bested 


By New La 


A new computer language, which 
competes with COBOL and RPG and 
13 presently operational on IBM 1401 
and System 360/30s and up, has been 


9 
nguage ! 


Frank J. Burns, Stat-Tabs National 
Director of Research & Development 
talking to your COMPUTERWORLD 
reporter this week explained the 


described by Statistical Tabulating lack of change in object-time per- 


Company Inc. which is marketing it 
through its nation-wide chain of 


servi centers. Dev by Ap 
erviggeceplers. Desslgaed by Ap 


OU Le 


formance noted within his own op. 
eration was due to the fact that they 


werg re ly eee yet outoas, besna 


Computerworld’s 
inaugural issue in 1967 
carried a Page One 
story on an upstart 
programming language 
called ADPAC from a 
company that its cre- 


ator, Peter Harris, had founded three years 
earlier. That company marks its 40th anni- 
versary this month, and Harris is still there, 


programming 10 hours 


a day. Page 12 


ALSO: IDG, Computerworid’s parent company, turns 40 
under its founding leadership. Page 12 


NetWare-on-Linux Release 
Due a Year Ahead of Schedule 


BrainShare attendees 
laud Novell's revival as 
Linux strategy unfolds 


BY MATT HAMBLEN 
SALT LAKE CITY 

The next version of Novell 
Inc.’s NetWare, to be renamed 
Open Enterprise Server, is 
now expected to be released 


by the end of this year — a full 
year ahead of schedule. 

After the release of OES, 
which will be a stack of ser- 


vices running on both the Net- | 


Ware and Linux kernels, Net- 
Ware won't go forward as a 
| stand-alone network operating 
| system, Novell confirmed at 
| its BrainShare user conference 
BrainShare, page 16 
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| In last week’s antitrust ruling 
| European Commission dem- 


| onstrated its determination to 
prevent the company from ex- 


'Data-Sharin 
| Woes for ott 





| cites FBIsfailureto | 
| build IT infrastructure | 
BY DAN VERTON 
| WASHINGTON 


| Thousands of Americans died 





| officials said last week. 


| and in testimony on March 24 


Europe Demands Server 
_ Jewels From Microsoft 


BY PATRICK THIBODEAU 


AND CAROL SLIWA 


against Microsoft Corp., the 


panding its operating system 
dominance from desktops to 
servers. 


Clarke Blames 


Former Bush adviser 


at the hands of terrorists on 
Sept. ll, 2001, primarily be- 
cause of a fundamental inabili- | 
ty among government agen- 
cies to share information, two 
top former counterterrorism 


In a controversial new book 


before the National Commis- 

sion on the Terrorist Attacks 

Upon the United States, Rich- 
Clarke, page 16 | 
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®@ Aphoto journal of Clarke’ $s 
testimony: 
@ FBI faulted for IT failures: 
os 
www.computerworld.com 





| analysts and legal ex- 
| perts on the decision’s 
| likely impact. 


| as it was several years 


LEC ’s interoperability decree calls for release of 
interfé ace documentation; Microsoft will: appeal 


By requiring server-to-server 
interoperability, the commis- 


| sion went well beyond the U.S. 
| antitrust settlement reached 
| in 2001. But there appears to 


be little consensus among Mi- 
crosoft users, industry 


“Tt’s not as big an issue 


ago, because Microsoft 


| is looking more toward stan- 
| dards,” 
| veloper at Woodforest Nation- 
| al Bank in Spring, Texas. 


said Mike Jones, a de- 


Roger Owdom, a senior de- 
velopment engineer at Cater- 


INSIDE 


= 
some 
Speech Server 
recognition. 


pillar Inc. in Peoria, Ill, said 
he doesn’t have strong feelings 
about the decision and can see 
the argument from both sides. 
But Owdom said he believes 
that the number of available 
application programming in- 
terfaces should be increased 
so other vendors and develop- 
ers can expand upon what 
Microsoft has done. “I’m 
not exactly sure what 
the APIs are that they’ve 
been hiding,” he said. 
Javed Fouch, a pro- 
grammer at Hagerty 
Insurance in Traverse 
City, Mich., said he sees bene- 
fits to disclosure. “The more 
that people have the opportu- 
nity to create products that in- 
tegrate well with Microsoft 
EC Decision, page 53 
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CUSTOMIZATION. BECAUSE THERE’S NO BUSINESS LIKE YOUR BUSINESS.| Your business 
So, now you can have applications created for imageRUNNER® that meet many of the unique 


your business. You can tailor your choices on its touch-screen user interface. You can 





1-800-OK-CANON 





eliminate time-consuming steps from the workflow process. You can 


make it simple and efficient. And that’s just scratching the surface. 


Yes, customization is not business as usual. KNOW HOW 





Your company 
turns to you for 
infrastructure 
security. 


So, where can you turn? 


Security is a primary concern for all of us. That's why we've developed an array of new tools and guidance 
centralized at microsoft.com/security/IT. It's a resource you can turn to for timely news, education, and tools, 
all intended to help you better plan and manage the security strategy that’s right for your company 


Take advantage of the latest tools and training at microsoft.com/security/IT. 


> Free Security Training > Free Emergency Notifications 
Register for free security management training Sign up to stay up-to-date with the latest 

including a Security Summit in a city near you, weekly vuinerability assessments, mitigation advice, 

security Webcasts, and in-depth e-learning designed and patch availability. 

to help you improve your security infrastructure 


_ Free Security Guidance Kit 
» Free Tools and Updates > Evaluate detailed guidance and templates, 
> Streamline patch management with free tools then pre-order your free CD-ROM with roadmaps 
such as Microsoft® Software Update Services and how-to guides. Learn how measures like 
Download software like Microsoft Baseline Security automating security patch installation and 
Analyzer to verify that your systems are configured blocking unsafe e-mail attachments can help 
to maximize security. better protect your organization. 


Go to microsoft.com/security/IT 


For ongoing guidance to help better plan and manage your 
company’s IT security, go to microsoft.com/security/IT today. 
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the oldest software 
company still operat- 
ing under its founding 
leadership. Page 12 


Cleveland State University 
sues PeopleSoft for $510M, 
claiming that its software 
didn’t work as promised. 


Dual-mode mobile phones 
are starting to appear, and 
users are intrigued. 


The Witty worm highlights a 
troubling increase in the num- 
ber of flaws being discovered 
in security products. 


Dell upgrades its NAS prod- 
uct line, challenging HP in the 
low-end storage market. 


Microsoft’s CRM software 
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extreme programming for software develop 
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reports plummet and productivity rise, says 
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Clarke Testifies: The Day in Photos 


JRITY: Computerworld’s Dan Verton of- 
fers a close-up view of Richard A. Clarke’s 
dramatic testimony before the 9/1l investiga 


tive commission. @ QuickLink a4160 


Why Biz/IT Alignment Is Elusive 
CAREERS: Most IT staffers are woefully inad- 
equate at dealing with the delicate issues that 
arise in meetings with business leaders, says 


IT consultant Jim Carty. @ QuickLink 45644 


Wireless Hacking Techniques 
MOBILE/WIRELESS: In this excerpt from their 
book Maximum Wireless Security, authors 
Cyrus Peikari and Seth Fogie explain com- 
mon attacks such as sniffing, spoofing and 


session hijacking. @ QuickLink 45526 
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HP Sues Gateway 
Over Tech Patents 
Hewlett-Packard Co. filed a law- 
suit in U.S. District Court in San 
Diego accusing Gateway Inc. of in- 
fringing on six patents related to 
PCs and servers. Gateway had li- 


censed some of the patents until 
1999, HP said, adding that it 


hopes to sign a new deal and settle | 


the suit. Gateway said it is “very 
confident of our position and will 
defend ourselves vigorously.” 


Report Cites Project 
Problems at Agency 
The inspector general at the U.S. 
Department of Veterans Affairs 
warned that the agency’s installa- 
tion of a new financial system 
faces possible delays and cost 
overruns because of project man- 
agement shortcomings. The sys- 
tem is based on Oracle Corp. ap- 
plications and budgeted at $472 
million. In a report issued March 
19, the inspector general said VA 
officials need to “aggressively 
oversee” a test deployment at a 
medical facility in Bay Pines, Fla. 


Microsoft Previews 
Windows CE Rollout 


Microsoft Corp. today will intro- 
duce a technology preview kit for 


an upgrade of its Windows CE em- 


bedded operating system that’s 
due later this year. Windows CE 
5.0 will make it easier for devel- 
opers to add security features 
and voice-over-IP client software 
to embedded devices and thin 
clients, Microsoft officials said. 


Indian Firm Signs 
IT Deal With IBM 


IBM said its Indian subsidiary has 
signed a 10-year outsourcing deal 
valued at up to $750 million with 
Bharti Tele-Ventures Ltd., a tele- 
communications services pro- 
vider in New Delhi. IBM will man- 
age Bharti’s hardware, software 
and IT services needs and consol- 
idate its data centers and help 
desk operations. 


www.computerworld.com 





niversity Pins $510M 
awsuit on PeopleSoft 


Cleveland State is charging fraud and 
breach of contract over ERP project 


BY MARC L. SONGINI 
HIO’S ATTORNEY 
general has filed 
a lawsuit against 
PeopleSoft Inc. 


| seeking $510 million in dam- 
| ages over a problematic instal- 


lation of the company’s ERP 
and student administration 


| applications at Cleveland State 


University. 


The lawsuit, which was filed | 
| Jan. 30 in an Ohio state court, 
| claims that the student admin- | 
| istration applications were 
| “vaporware” when the project 


began in 1997 and that the 
module for managing financial 
aid remains unusable even 
now. Through the attorney 
general, Cleveland State is 
charging PeopleSoft with 


| fraud, breach of contract, neg- 
| ligent misrepresentation and 
| four other counts. 


The school is also seeking 


| unspecified damages from 


Kaludis Consulting Group 


| Inc., a Washington-based firm 


that advised Cleveland State 





during the technology selec- 
tion process and then tem- 
porarily managed the project. 
Via e-mail, a spokesman for 
Cleveland State declined to 
comment about the suit, citing 
a school policy against dis- 
cussing pending litigation. 
PeopleSoft officials also 
wouldn’t discuss the case. 
Cleveland State was the first 
user to install a full set of Peo- 
pleSoft’s student administra- 
tion applications. But in 1999, 





university officials blamed the 
software for problems in pro- 
cessing financial aid, enrolling 
transfer students and record- 
ing grades [QuickLink a4170]. 
In the lawsuit, Cleveland 
State says PeopleSoft falsely 
assured it that the applications 
would run on the school’s IBM 
mainframe. In addition, the 
initial version of the software 
that Cleveland State received 
was “woefully deficient,” ac- 
cording to the suit. 
Subsequent releases also 
didn’t work as promised, the 
school claims, saying it had to 
install “hundreds of fixes” to 
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Mobile Phones Move Toward 


BY BOB BREWIN 
ATLANTA 


| At last week’s CTIA Wireless 


2004 conference, technology 
vendors held out the promise 
of all-in-one mobile devices 
that combine the functions of 
cordless phones, cellular 
handsets and IP telephones. 
Corporate users said the 
combined products could cut 
costs and reduce the need for 
mobile workers to carry multi- 
ple devices to support differ- 
ent modes of mobile voice 


| communications. 


William Greskovich, vice 


| president of operations and 
| CIO at St. Agnes HealthCare 





Combined Calling Capabilities 


in Baltimore, said dual-mode 
phones supporting cellular 
communications and voice- 


| over-IP calls made via wire- 


less LANs would make it easi- 
er for his staff to support visit- 


| ing doctors who have prac- 


tices at St. Agnes and want to 


| use the hospital’s WLAN for 
| making calls. 


Shawn Wilde, director of 


worldwide operations at Trim- | 


ble Navigation Ltd., a Sunny- 
vale, Calif.-based maker of 
Global Positioning System re- 
ceivers, has already deployed 
40 wireless VoIP phones from 
Cisco Systems Inc. But Wilde 
said he’s so intrigued by the 


| available but have 
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The suit claims student administration 
applications were “vaporware” at first 


and remained “woefully deficient.” 


potential utility of dual-mode 
phones that he doesn’t plan to 
buy any more pure VoIP de- 
vices until the combined mod- 
els hit the market and he eval- 
uates them. 

Some dual-mode 
devices are already 


READ MORE ONLINE 


For stories about mobile and 
wireless technologies, go to 
our Knowledge Center 


@ QuickLink k1000 
www.computerworld.com 


a 


| as an IP phone when it senses 


limitations. Nokia 
Corp. last month 
introduced a dual- 
band cell phone 
that can function 


a WLAN, although it needs to 
connect to a PC-based soft- 
phone client to do so. 
Denmark-based RTX Tele- 
com A/S last week debuted 
a cordless phone that can 
make calls through the public 
switched telephone network 
or link to softphone clients for 








| try to get the software to func- 


tion properly. Work on the 
project continued unsuccess- 
fully into 2001, the suit says. 

The fallout at Cleveland 
State allegedly included more 
than $5 million in lost revenue 
because of an inability to track 
and collect receivables, plus 
the need to make unexpected 
purchases of a second main- 
frame and a Sun Solaris server 
with an Oracle database. 

James Lang, an attorney at 
Cleveland-based Calfee, Halter 
& Griswold LLP who is han- 
dling the case for the attorney 
general, said Cleveland State 
eventually gave up on some of 
the PeopleSoft applications 
and decided “to go down an- 
other path.” But Lang said he 
didn’t have details about the 
technology now used for stu- 
dent administration. 

Joshua Greenbaum, an ana- 
lyst at Daly City, Calif.-based 
Enterprise Applications Con- 
sulting, said failed ERP instal- 
lations are often the result of 
implementation problems, 
not shortcomings in the soft- 
ware itself. 

“But what’s important when 
you see a lawsuit of this mag- 
nitude erupt into the public 
arena is that the customer re- 
lationship process between 
vendor and customer has bro- 
ken down completely,” Green- 


baum said. @ 45786 


wireless VoIP calls. 

Devices that don’t require 
the use of softphone technol- 
ogy are starting to appear on 
the horizon. At the chip level, 
Texas Instruments Inc. intro- 
duced a low-power 
Wi-Fi chip set for 
dual-mode phones 
and said it’s work- 
ing with Motorola 
Inc. to develop 
combined cellu- 
lar/VoIP products. 

The new chip set uses 50% 
less power than an earlier ver- 
sion and supports both data 
and VoIP operations, accord- 
ing to a TI spokeswoman. She 
said Motorola expects to ship a 
phone based on TI’s first dual- 
mode chip set this year and 
will add a device built around 
the new one in 2005. @ 45785 
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Securi 


Witty worm marks 
latest case in point 


BY JAIKUMAR VIJAYAN 

The software vulnerability 
that was exploited by last 
week’s Witty worm is only the 
latest on a growing list of flaws 
that are being discovered in 
the very products users invest 
in to safeguard their systems. 

“This is a new realm of risk 
that users must confront: the 
security of security [prod- 
ucts],” said Andrew Plato, 
president of Anitian Enter- 
prise Security, a systems inte- 
gration and consulting firm in 
Beaverton, Ore. 

The Witty worm, which was 
reported to have damaged be- 
tween 15,000 and 20,000 com- 
puters worldwide, took advan- 
tage of a flaw involving the 


BlackIce and RealSecure in- 
trusion-prevention products 
from Atlanta-based Internet 
Security Systems Inc. (ISS). 
The worm wrote random data 
onto the hard disks of vulnera- 
ble systems, causing the drives 
to fail and making it impossi- 


| ble for users to start up the 


systems. 

The flaw was the result of a 
buffer overflow condition in a 
function used to detect peer- 
to-peer traffic, said Chris Rou- 
land, director of the X-Force 
security team at ISS. 

The company worked to 
“very quickly mitigate the 
risk” after being informed of 
the problem by eEye Digital 
Security Inc., Rouland added. 
But Witty was released “al- 
most immediately” after the 
fix became available and be- 
fore some users had time to 


Dell Boosts NAS Capacity 
By Adding External Storage 


Seeks to undercut 
HP’s low-end 
products on price 


BY LUCAS MEARIAN 

In a challenge to Hewlett- 
Packard Co. in the low-end 
storage market, Dell Inc. last 
week announced a network- 
attached storage (NAS) device 
that runs Windows and sup- 
ports external disk drives as a 
more scalable alternative to 
internal ones. 

The PowerVault 745N sup- 
ports between 160GB and ITB 
of internal storage using Serial 
ATA disk drives or up to 4TB 
of external capacity on SCSI 
drives. Pricing starts at $1,799 
for the device, which is an up- 
graded version of Dell’s Power- 
Vault 725N array. That product 
supports only internal storage. 

RSP Architects Ltd., a firm 
with dual headquarters in Min- 
neapolis and Tempe, Ariz., 
uses the 725N and is looking 
to upgrade to the 745N to take 
advantage of the increased 
scalability. 





Tom Kouri, director of IT 
at RSP, said he also looked at 
NAS boxes from HP, EMC 
Corp., IBM and Iomega Corp. 
before deciding to buy the 
725N last year — partly be- 
cause of Dell’s pricing. 

“Every time we looked at 
the IBMs, EMCs, HPs and 


Compags to negotiate hard 


ware, Dell was always able to 
Beene) ay ee 
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| storage products, including 
| alow-end NAS de- 


| CX200 disk array 


| Corp.’s Windows 


| 500GB to 4.4TB and starts at 
| $32,000. But despite the simi- 





respond, he said. Rouland said 
the number of major flaws 


| that have been discovered in 

| ISS products over the past five 
| years has been limited to two. 
| That’s well below the industry 


average, he stressed, because 
ISS follows strong quality and 
code audit processes. 

Just a few weeks earlier, a 


vulnerability caused by an 
| unchecked buffer was discov- 


ered in a firewall from Zone 


| Labs Inc. in San Francisco. 


Fred Felman, vice president of 
marketing at Zone Labs, said 


| his company also responded 
| quickly, so no exploits were 


reported. Zone Labs follows 
“stringent” processes for 
product quality, Felman added. 
In February, vulnerabilities 
were discovered in a firewall 
from Check Point Software 
Technologies Inc. that could 


give us a much better deal,” he 
said. “If you're selling the 
same box with a few different 
tweaks, what does it really 
come down to?” 

Dell resells EMC’s Clariion 


vice that combines 
the Clariion 

with Microsoft 
Powered NAS soft- 


ware. Sold as the 
NetWin 200, it scales from 


= ———— 


lar capacities, Dell said it does 
not see the 745N and NetWin 
200 as rivals. 

“One of our key goals is to 
offer enterprise-class function- 
ality at very aggressive price 


| points,” said Bruce Kornfeld, 
| director of worldwide market- 


ing at Dell. “EMC is well aware 


| of what we’re doing.” 


Because of the vast differ- 
ence in price, the EMC and 
Dell devices are targeted at 
two different markets, said 
Peter Gerr, an analyst at Enter- 
prise Storage Group Inc. in 
Milford, Mass. “I see this as 
Dell attacking the lower-end 
space,” Gerr said. 


STORAGE DOWNLOAD 


For more storage coverage, go to 
our online Knowledge Center 

@ QuickLink k1700 
www.computerworld.com 


Product Flaws Attract Attackers 


have allowed attackers to 
modify firewall rules. Similar- 
ly, a critical vulnerability was 
discovered in an Internet se- 
curity product from Symantec 
Corp. that would have let at- 
tackers gain remote access to 
a compromised system. Over- 
all, security vendors average 


| about four critical vulnerabili- 


ties each year, according to 
statistics from ISS. 

The trend isn’t a particular- 
ly comforting one, Plato said. 
“Users should be very wor- 
ried about this. The mad dash 
to be first to market on every 
feature often creates sloppy 
engineering.” 

Security software is becom- 
ing an attractive target for at 
tackers, said John Pescatore, 
an analyst at Stamford, Conn.- 
based Gartner Inc. “If you are 
a hacker and you want to get 


EMC spokesman Rick La- 


| croix said Dell will continue 


to use EMC’s hardware for 
higher-end NAS devices and 
disk arrays. “The relationship 
between EMC and Dell is very 


| strong,” he said 


HP’s low-end 
Storage Works 
NAS 1200s prod- 
uct line starts 
at $2,999 for a 
320GB device and 
can support up to 
1TB of internal 


| storage capacity. Harry Baev- 
| erstad, director of NAS stor- 
| age at HP, claimed that Dell’s 


lower entry-level price for the 
745N is deceiving because it 
includes only enough capacity 
to run Windows. 

Baeverstad said a more valid 
comparison would be to HP’s 
NAS 2000s, which supports 
external storage. Pricing for 
the 2000s starts at $8,295 with 
internal drives and $13,295 with 


} external ones. “It’s comparably 


priced, if not better priced” 
than the 745N, he said. 

In response, a Dell spokes- 
man said the 745N is priced at 
about $3,700 for a full ITB in- 
ternal storage configuration 


| and starts at less than $10,000 


with external storage. @ 45753 
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Nonsecure 
Security 
Recently reported flaws in 
= 1SS Blackice and RealSecure 


software: CQ parsing 
vulnerability 


= Zone Labs ZoneAlarm 
firewall: SMTP processing 
vulnerability 


= Symantec Internet Security 
2004 and Internet Security 
2004 Professional: ActiveX 
component arbitrary file- 
execution vulnerability 


"= Check Point FireWall-1: 
HTTP parsing format string 
vulnerabilities 


some publicity, the best way to 
get it is to [break into] a secu 
rity product,” he said. 

Last week’s incident also 
put the spotlight on a trou- 
bling habit by some security 
vendors to search for and dis- 
close flaws in rival products 
as part of their competitive 
efforts, said Pete Lindstrom, 
an analyst at Spire Consulting 
LLC in Malvern, Pa 

Aliso Viejo, Calif.-based 
eEye, which discovered the 
ISS flaw, sells products that 
compete with those from ISS. 
It was also eEye that discov 
And 
ISS in the past has found prob- 


ered the Zone Labs flaw. 


lems in other vendors’ prod- 
ucts, such as those from rival 
Check Point. 

“It’s a fundamental conflict 
of interest,” Lindstrom said. 
“Why would you even be 
looking at your competitors’ 
products to begin with?” 

According to Firas Rouf, 
chief operating officer at eEye 
his company doesn’t spe¢ 
cally search for flaws in com 
petitors’ products. The discov 
ery of the ISS flay 
result of researc 
ducted on a si 
being dev elope dt 
Rouf said 

Rouland said ISS is interest- 
ed only in finding vu I 
ties that exist in broadly u 
preducts. “We would look at a 
Check Point product just as we 
would a Microsoft product, be- 
cause they are both so widely 


deployed,” he said. @ 45775 
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Oracle Postpones 
Messaging Upgrade 


Oracle Corp. said it now plans to 
ship a new version of its Collabo- 
ration Suite messaging software 
by year’s end, as much as six 
months behind schedule. The up- 
grade, which had been due by 
midyear, will add instant messag- 
ing and other features. Oracle ex- 
ecutives said they remain com- 
mitted to the software despite the 
delay and a small market share. 


Red Hat Reports 
Big Sales Increase 


Red Hat Inc. reported a 43% 
year-over-year jump in revenue 
for its fourth quarter, which end- 
ed Feb. 29. The company, which 
was profitable in the quarter, said 
it sold about 87,000 new sub- 
scriptions for its Enterprise Linux 
operating system. 


BY THE NUMBERS 
REVENUE 


cm | Ea 


GNOME Web Server 
Struck by Intrusion 


The GNOME Project delayed an 
upgrade of its open-source desk- 
top software from March 24 to 
this Wednesday because of an in- 
trusion on its Web server. A mem- 
ber of the group said in an e-mail 
posting that none of the source 
code it has released was affected. 
But, he added, the upgrade to 
GNOME 2.6 was put on hold to 
give systems administrators time 
to investigate the incident. 


Short Takes 


E announced the second 
version of internal Controls Man- 
ager, an application that’s de- 
signed to help users document 
their financial controls as part of 
Sarbanes-Oxley Act compliance 
projects. . .. PEOPLESOFT INC 


unveiled two CRM applications tai- | 


lored for financial services firms 
and one aimed at universities. 


AA A r Y hat 
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IPOs Hit Governance 
Pothole ... 


. as high-tech start-ups grapple with complex compliance issues that | 
are slowing their efforts to go public. You might not think that it mat- 
ters much, but without the incentive to strike it rich on Wall Street, entre- 
preneurs and venture capitalists may opt for corporate takeovers as 
the less onerous way to cash out. That changes the nature of innova- 
tion in technology because bigger companies often buy little ones not 


to capitalize on new products but simply 
to squelch them so they no longer pose a 
competitive threat. New public compa- 
nies have long been the source of IT’s 
ability to help businesses compete. Think 


of Intel, Sun, Cisco, Microsoft and others. | 


Without the IPO market, we might still be 
running CP/M on Zilog chips using Hayes 
modems. Michae] Howard, CEO of Outer- 
Bay Technologies Inc. in Cupertino, 
Calif., observes that in addition to in- 
vestors demanding better financial per- 
formance from pre-IPO 
companies than ever before, 
Uncle Sam has tossed a big, 
expensive compliance hur- 
dle in front of start-ups. “In 
order to go public today, 
you also have to be ready to 
spend millions for gover- 
nance,” he says. Konrad 
Feldman, the CEO of anoth- 
er pre-IPO company, New 
York-based Searchspace 
Corp., agrees. “The costs of 
going public [are] potential- 
ly an issue because they are 
costs you can’t control,” he 
says. “You must comply.” 
Ken Schneider, chief tech- 
nology officer and vice 


\ 


| antispam work at Brightmail. The next re- 


Serial Success 


Breer UB Uhre Urecte (cto 
nology Attachment 
(SATA) technology gets 
PM ee bey Li) 
Advanced Technology 
and Systems Co. in 
Irvine, Calif., releases 
itary ey VEY 
15-drive arrays. The 
arrays offer both Fibre 
Channel and UltraSCSI 
host connectors. Each 
SATA drive has a capac- 
ity of 120GB. Pricing 
ace tele 
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president of operations at Brightmail Inc. 
in San Francisco, acknowledges that 
some start-ups might lack the resources 
to meet new governance standards. But, 
he adds, “well-managed companies usu- 
ally have their [compliance] act together 
before they get to the IPO stage.” Bright- 
mail has just filed papers with the U.S. 
Securities and Exchange Commission to 
go public. ® But going public isn’t slowing 


lease later this year of its BrightSig algo- 
rithms will be able to detect 
spam that can trick standard 
Bayesian filters by inserting 
“good” words into the tops 
and bottoms of messages, 


| among other things, grants the company 
| rights over modifying Domain Name Sys- 
| tem records to redirect e-mail to a man- 


| aged service provider, as well as an 
| MSP’s ability to let end users configure 
| their antispam preferences. Although he 


says Postini “will not be a predatory 


| patent company,” antispam MSPs better 


take a close look at the patent. Petry be- 
lieves the patent will give Postini a com- 


| petitive edge and be seen as a bonus by 
| Wall Street when the company files to go 


public. ® One of the great serial start-up 
execs in Silicon Valley, Judy Estrin, is at it 
again. She has helped found three suc- 

cessful start-ups — Bridge Communica- 
tions, Network Computing Devices and 


| Precept Software — and wants to hit the 


jackpot again as chairman and acting 
CEO of Precision I/O Inc. in Palo Alto, 
Calif. Next week, the fledgling operation 
will announce that it has received $10 
million in venture capital. Estrin says 
Precision I/O software will open the net- 
working-server bottleneck that has 


| emerged with 1 Gigabit Ethernet and will 


become untenable with 10 Gigabit Ethernet. 
The product, which she declined to 


| name, will offload from the operating 
| system the handling of network proto- 


cols. Expect more news this summer. 
Apple Computer Inc. starts shipping the 
two-CPU version of its Xserve 1U (1.75-in. 





which is where the filters do 
their analysis. You can ex- 
pect less spam as a result. 

The folks at Postini Inc. in 
Redwood City, Calif., also 
think they’re pretty good at 
fighting spam. Apparently, 
the U.S. Patent and Trade- 
mark Office thinks so, too, 
because it issued Postini a 
pretty broad patent that will 
be announced today. Ac- 
cording to company founder | 
Scott Petry, the patent, 


high) server in April to complement the 


| single-CPU units it began shipping this 

| month. Apple says the combination of its 
QuickTime Streaming Server software 

| and the Xserve’s dual Gigabit Ethernet 


and fast Error-Correcting Code memory 


| (which wasn’t available in previous 


Xserve servers), plus unlimited user li- 


| censes for Mac OS X, will make the serv- 
| er perfect for large-scale streaming video op- 


erations because one Xserve can handle 


| 10,000 simultaneous streaming sessions. 


If only there was something worth 


| watching. @ 45760 


Users Applaud, Critique Microsoft CRM 


success to resolve the prob- 
| lem, Kruger said. 
Microsoft CRM 1.0 was 


A panel of IT managers who 
are running Microsoft Corp.’s 
CRM applications said last 
week that the first release was 
a good start. But some added 


and connectivity bumps. 
Microsoft CRM, which be- 
gan shipping early last year, 
was relatively simple to roll 
out and has been stable, said 
users who spoke during a fo- 
rum at Microsoft’s Conver- 


| gence 2004 conference here. 


But the start-up process 


| hasn’t been trouble-free, they 


| 
| 
| 
| 


said. For instance, Rick Shrum, | 


director of IT for the Seattle 
SuperSonics and Storm bas- 


| ketball teams, said linking 
that they have hit performance | 
| of the CRM software over his 
| WAN and synchronizing data 
| was a very slow process. 


Outlook clients to Version 1.0 


Shrum said Outlook works 
better with Version 1.2 of the 
software, which was released 
in December and includes a 


fast synchronization feature. 
Workers at Designer Doors 


| Inc.’s 15 remote sales offices 


also are having some prob- 
lems with Microsoft CRM 1.0, 


said Michael Kruger, informa- 


tion systems manager at the 
River Falls, Wis.-based door 
maker. The salespeople con- 


| nect to the software via a vir- 
tual private network but are 


unable to access CRM data on 
their PCs when they go off- 
line. Microsoft’s technical sup- 


| port team has tried without 





“very strong” for a new code 
base, said Douglas Burgum, 
president of Microsoft’s Busi- 
ness Solutions unit. Version 
1.2 improved the software’s 
stability and performance, he 
said, adding that Version 2.0 is 
due within the next 12 months. 


| @ 45784 


Microsoft is adding mobile CRM support 
and upgrading three of its ERP lines 
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Gateway knows that 

IT and financial services 
want the same thing. 

A solid investment. 


“We need equipment that works and a company that’s 
going to be around for technical support. There are two 
isons we use Gateway” servers: cost and reliability. 
iteway servers are efficient.” 


Bruce Hagood, IT Director 
Money Concepts International 


In the online securities market, fortunes can be won and lost in seconds. 


So when Money Concepts required a cost-effective, secure server network 
Solution to meet the growing needs of their 650 financial planning centers, 
they invested in Gateway. 


We provided highly reliable server technology with the reliability, advanced 
features, built-in redundancies, and high-speed performance necessary to 
meet strict SEC requirements. And with a dedicated systems consultant 
account manager advising from planning through implementation, this was 
one investment that proved to be no risk and all reward for Money 
Concepts International. 

To learn more about Gateway’s complete IT solutions including 
servers, storage, and networking, call us today. Ask about saving 
$1,000 on our 840-2TB SATA RAID Enclosure when purchased 
with a rackmount server before April 30, 2004.' 


We’re listening. 


Gateway® 995 Rack Server Gateway® 840-2TB SATA Award-Winning Customer Support? 
Prices Starting at $5,499 RAID Enclosure 


4U Quad Processor, Enterprise Class Prices Starting at $5,949 ; 
* Quad Intel® Xeon™ Processor 2U High-Capacity Storage Solution « On-site support 


Gateway provides: 

* 24/7 phone support 

vext business day 
MP Capable * Comprehensive 2TB Solution or the next day—nationwide* 

* Up to 24GB PC2!00 ECC DDR SDRAM Scales to 3TB 

* Up to Five U320 SCSI Hot-Swap * Hot-Swap SATA Hard Drives with 
Hard Drives Embedded RAID 


* Multipath Booting, Memory Scrubbing, * 3-Year Limited Warranty4 


Light Guiding Diagnostics (. ate \ N ] a\ ) 


Professional 


* On-site support within 2 hours 
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WEIGHING THE COST OF LINUX VS. WINDOWS? 
LET'S REVIEW THE FACTS. 
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One Linux image running on One Windows Server 2003 image 
two 2900 mainframe CPUs running on two 900 MHz Intel Xeon CPUs 


Linux was found to be over 10 times more expensive than Windows Server™ 2003 ina 
recent study. The study, audited by leading independent research analyst META Group 


measured costs of Linux running on IBM's 2900 mainframe for Windows-comparable 
functions of file serving and Web serving. The results showed that IBM z900 mainframe 
running Linux is much less capable and vastly more expensive than Windows Server 2003 


as a platform for server consolidation. To get the full study and other third-party findings 


visit 
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y Years Later, 
PAC Lives 


£ 41. 


“COBOL, RPG BESTED BY NEW 
LANGUAGE?” That was the 
headline on page 1 of Comput- 
erworld’s inaugural edition on 
June 21, 1967. 

The language in question, 
called ADPAC, 
at Applied Data Systems Inc., 
a San Francisco-based compa- 
ny that this month marked its 
40th anniversary. Peter Harris, 
the creator of ADPAC and 
founder of the company that 


was developed 


subsequently changed its 
name to ADPAC Corp., calls 


COMPUTERWORLD | 


The Newsweekly for the Computer Community 


i _Seee 


_ Cambridge Maneachuartis 


June 21, 1967 


By Don Tennant 


himself “America’s se- 
nior programmer.” 
Harris, now 74 and the 
company’s chief tech 
nology officer, recent- 
ly spoke with Comput- 
erworld about what 
may well be the oldest 
software company in 
the world still operat- 
ing under its founding 
leadership. 


What ever happened to the AD- 
PAC language? It’s still widely 
used. We sold it to hundreds 
of companies, and we still 

| have a number of them who 

| have some major applications 
written in ADPAC. 


You would contend that 
ADPAC is superior to 
Cobol, no doubt. 
Everybody knows 
that. Technically, 
there’s no question 
about it. It has more 
features, functions; 
it’s easier to program 
in, easier to learn. 
Cobol was not very 
popular in the early 
days; it started to gain strength 


in the ’70s. 


| To what do you attribute the fact 


that ADPAC never managed to 
unseat Cobol? The government. 
There’s no question about it. 
The federal government said, 
“All programming for the 


www.computerworld.com 


letters, and I got absolutely no 
interest whatever. All of our 
[client] companies had ig- 
nored the Y2k issue. They 
were all acting like there was 
no change of century. I started 
to call them; I got absolutely 
no response — no reaction. I 
couldn’t convince anybody to 
do any work on it. I’m talking 
about Aetna, Travelers, Pru- 
dential, you name it — big 
corporations. Nobody did any- 
thing about it until 1998. 


So you foresaw this problem as 
early as 1968? Well, you could 
see it, yeah. Here I am, think- 
ing I'm in the forefront of soft- 
ware and data processing, 

and one by one, we're picking 
up large national accounts, 
and I'd tell them about this. 
Zero interest. Even as early as 
the 60s. 


As it turned out, Y2k had a very 
positive impact on your company 
as a revenue generator, didn’t it? 
Oh yeah. We went from $1 mil- 
lion or $2 million to $10 mil- 
lion in 1999, Interestingly 
enough about Y2k, very little 
of it has actually been convert- 
ed in databases. The majority 
of fixes to Y2k was done with 
what's called windowing. 
What [technicians] would do 


‘COMPU TERWORLD IS LAUNC HED. 


First Newspaper For The Full Computer Community 


COBOL. RPG Bested 
By New 


is, where they needed a date, 
they would call in a small rou- 
| tine and modify the date right 
there and print it in the report. 
But they never changed the 
database. And that’s still true 


“A number” being how many? | 
would say a hundred. ‘Travel- 
ers, Prudential, Citibank Corp. 
— they all had it. I don’t know 
Loffhand] which companies 

| are still using it, but I know 


government will be done 
in Cobol.” 





Burroughs 3500 Next Issue Next Month 


Your company did a lot of Y2k 
conversion work. At what point 
did you, as one of the early pro- 


Software Shown 9 W eekly In September 
Language ? : 
Publicly , 


READERSHIP TARGET 300,000 


| there are up to a hundred 


| companies paying us annual 


The first issue of Computerworld on 
June 21, 1967, covered ADPAC 


| renewals. 


renewals. We get close to 
$1 million a year in annual 


gramming pioneers, realize that 


| there was going to be a problem 
| on Jan. 1, 2000? I wrote letters 


[to clients] in 1968 and 1978 


| and 1988. All that time, I wrote 


today. 
A [similar] problem coming 


| up is the UPC [Universal 


Product Code used for bar 


| codes]. It’s required to be 


IDG Marks 40 Years Under Founding Leadership, Too 


JUST NINE DAYS before Peter 


Harris founded ADPAC, Patrick J. 


McGovern on Feb. 26, 1964, 
founded international Data Group, 
Computerworld’ s parent compa- 
ny. Boston-based IDG, now a 
global IT publishing and market 
research firm, is also celebrating 
40 years under its founding lead- 
ership, with McGovern serving as 
its chairman. 

McGovern spoke with Comput- 


erworld last week and shared his 
perspective on the outlook for the 
IT community. Excerpts follow: 


Do you think offshore out- 
sourcing will have a net posi- 
tive impact or a negative im- 
pact on the U.S. IT industry? 
Outsourcing will definitely be a 
benefit to the U.S. IT industry. Out- 
sourcing reflects the globalization 
of labor. It will take several 


decades, but eventually there will 
be equal pay for equal work all 
over the world. It is only 

fair that human beings 

are rewarded for their 

work in comparable 

ways. This process will 

allow the IT industry to 

benefit from the most 

skilled people available 

at the most competitive 

rates of compensation. 


What is your advice to college- 

age students who are consider- 
ing pursuing a degree 
in computer science 
but are wary about 
their employment 
prospects? | definite- 
ly would encourage 
college-age students to 
pursue a degree in com- 
puter science. Although 
the market has slowed 
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| kept telling 
everybody, 
‘There ain’t nobody 
going to change 
over to Java.’ It’s 
a crazy language. 


changed by the first day of 
next year [QuickLink 39121]. 
And almost no company is 
moving on it. And I’m talking 
about large corporations like 
Target and people in the gro- 
cery business that depend 
upon that bar code. All of their 
applications are sitting there 
with eight- or 10-digit codes, 
and they’re going to have to 
increase it to 14 characters by 
the first of the year. 


How has programming changed 
as a career over the years? At 
various times in the past 30 
years, Cobol was supposed to 
die and people lost interest in 
it. Three or four years ago, it 
was all going to be Java and 
big companies were going to 
change all of their code over 
to Java. I kept telling every- 
body, “There ain’t nobody go- 
ing to change over to Java.” It’s 
a crazy language. It’s more like 
C++. It’s difficult to program, 
difficult to maintain; who’s go- 
ing to do it? Now, program 
mers, when they go to school, 
what do they learn? They 
learn C++. Where are they go- 
ing to get a job? They can’t get 
a job until they can boast 
some Cobol experience. 

The software employment 
situation is going to come 
back. The first people who 


down in the last three years be- 
cause of the bursting of the Inter- 
net bubble, it is now entering a 
growth phase, which should con- 
tinue for the next 12 to 15 years. 
Currently, the worldwide IT 
market is about $1.3 trillion, and it 
will grow to $3 trillion by 2020. 
The 1 billion users of IT devices 
and systems today will grow to 
3 billion users by 2020, virtually 
50% of the world population. This 
will create great employment op- 
portunities for IT professionals in 
the years ahead. 


will be hired will be people 
who know Cobol — not Java 
and not C++. The big main- 
frames are virtually 100% in 
Cobol. Some of them are in 
PL/I, and we have a translator 
from PL/1 to Cobol. We can’t 
sell it because PL/1 shops are 
fantastically in love with PL/I. 
It’s a personality issue. When 
you learn PL/I, you don’t want 
to learn or think about any- 
thing else. 


What is your view on the offshore 
outsourcing of programming 
work, and what does it mean for 
the future of programming as a 
career in the U.S.? I’m not sure 
that big corporations want 
people trained in beautiful 
downtown India dialing into 
their mainframe in New York 
City. So I don’t think there’s 
going to be as much offshoring 
as a lot of people think. Big 
companies regard their soft- 
ware as very proprietary — 
very personal and very home- 
owned. Moving it and training 
people in India and that area I 
don’t think is their cup of tea. 


Does ADPAC send any program- 
ming work offshore? No. We 
have very specialized people. 
Remember, practically all the 
services and programming we 
provide are done with auto- 
mated tools. We have so many 
automated toois for process- 
ing mainframe Cobol. Here’s a 
crazy example: We just sub- 
mitted a bid to the state of 
California. They will not ac- 
cept fixed-price bids. All of 


| our bids are fixed-price. Why? 


Because we use our software. 
We do in a day or a few hours 


What single quality has your 
experience shown to be the 
most important one for an 
IT professional to possess in 
order to be successful? I've 
found that there are actually two. 
One is the ability to relate well with 
their clients so that they can set 
expectations that are closely 
matched to achievable reality. The 
other is persistence — never get- 
ting discouraged or giving up, but 
pushing ahead to get to a suc- 
cessful conclusion. 

-Don Tennant 


ADPAC Apps Still Going Strong, User Says 


tela 
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ter-file updating from a 
transaction file,” Odoms 
said. “That’s the whole 
PERU MUM late ee 
language, and it does that 
very well.” 

And Odoms supported 
ADPAC Corp. founder 


what another company would 
take a month to do. We can’t 


bid that on an hourly basis, be- 


cause we'd finish in three days 
what represents a month or 
two of work. So when we bid 
competitively, we have to bid 
the month or two of labor. We 
pick what we think is a win- 
ning price, bid it and complete 
the work in three days. 


How do you account for the fact 
that your company was never ac- 
quired? We eventually will be 
acquired. We’re trying to posi- 
tion ourselves for that, now 
that we’re just starting to get 
profitable again [following a 
post-Y2k downturn]. Before 
this, owning a language and 
owning a compiler and trying 
to sell it was weird to them. 
Everybody said, “It’s a Cobol 
world.” What we’re doing now 
in preparation for the sale of 
the company is writing a spe- 


| cial translator that translates 
| ADPAC into Cobol. We have a 
| million lines of ADPAC code 
| that maintains all of our sys- 
| tems — our Y2k system, our 


UPC system is all written in 


elma ig Me tla) 
ra 8) eure CoN 
tages over Cobol. “If you 
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languages, | would say 
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said. “The structure is 
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Although Harris is writ- 
ing a translator to convert 
ADPAC to Cobol, Odoms 
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advantage of it. “We’re 
eventually going to be re- 
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~ Don Tennant 


ADPAC. We have many spe- 
cial processes that we sell, but 
they’re all written in ADPAC. 
So if we want to sell the com- 
pany, they’re not going to 

buy it if you need to have an 
ADPAC programmer. What 
they want is ordinary Cobol. 


When do you expect the company 
to be acquired? I would say 
within the next two years. 
The thing of it is now we're 
starting to be profitable again, 
and we like it. When we get 
the state of California con- 
tract, we're going to be very 
profitable; one more contract, 
and we're going to be filthy 
rich. 
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Why did you never take the com- 
pany public? Don’t you think you 
could have made a bundle when 
the dot-com bubble was intact? 
Our board of directors, which 
are very senior people, were 
not dot-commers. They didn’t 
like the idea, and you had to 
prove to them that if you’re 
going to go public, you had to 
be a multimillion-dollar com 
pany. Our board never saw us 


that way this soon 


What would you say is the single 
smartest thing you did during 

your career? I’m successful be 
cause I’m patient. Patience is 


the key to success 


What's the one thing you'd be 
most inclined to change if you 
had it to do over? We opened 12 
branch offices 20 years ago to 
support services throughout 
America. I had to raise a mil 
lion bucks to do it, and I had 
to bring in private capital 
to do it. Three years ago, I 
bought them all out. And I 
paid 2 million bucks to do it. 
I’m not so sure buying out the 
old stockholders was the right 
move, because I'd rather have 
the 2 million bucks 

I don’t know that there’s 
anything [else] I'd change. 
Suppose three years ago I sold 
the company for $6 million 
What would I have dor 


it? I would have put it in the 


e with 


stock market. I could have lost 
my shirt. Because many of my 
friends did. People I paid that 
$2 million to took their money 
and bought stock. I have one 
guy on our board who ab 


solutely went broke 


What’s the biggest challenge you 
face now? Having 40 years of 
these ups and downs, I am now 
facing a tremendous up. Usual 
ly, a company sells for four to 
six times its revenue. \ 

get to be a $5 million business, 
which we'll start to approach 
later this year, that means we 
could sell the company for 

$20 million. What would I do, 
at my age, with all that money? 
I program 10 hours a day, six or 
seven days a week. I still work 
hard at it. So the challenge is, 
I'm going to face that opportu- 
nity. Am I smart enough to deal 


with it? I don’t know. @ 45697 





Cisco to Acquire 
Security Vendor 


Cisco Systems Inc. said it plans to 
buy full ownership of Riverhead 
Networks Inc., a developer of net- 
work security technology in Cu- 
pertino, Calif., for $39 million in 
cash. Riverhead makes software 
that’s designed to protect net- 
works against denial-of-service 
attacks and other threats. Cisco, 
which already owns 10% of 
Riverhead, said it expects to com- 
plete the acquisition by the end of 
next month. 


VA Taps HP to 
Support System 

The U.S. Department of Veterans 
Affairs awarded Hewlett-Packard 
Co. a 10-year, $784 million con- 
tract to support and maintain the 
clinical and administrative system 
used at the agency's 170 medical 
facilities. The deal expands on a 
series of one-year contracts HP 
has held since the early 1990s. 
The system HP supports, known 
as VISTA, is tied to 21 networks 
that the VA operates. 


AT&T Speeds Up 
VoIP Development 
AT&T Corp. said it's accelerating 
a rollout of additional voice-over- 
IP services aimed at corporate 
users. The company by year’s end 
will add VolP-enabied options for 
users of its managed data com- 
munications and virtual private 
network services. AT&T also said 
it will offer VoIP applications for 
call centers, remote workers and 
IP Centrex networks, with trials 
due to begin by midyear. 


Short Takes 


announced a set of IP- 

based technologies that support 
streaming video and video-on- 
demand applications for corpo- 
rate users. . . . Paris-based 

said it has signed 
a deal to bundle server virtualiza- 
tion software made by EMC 
Corp.’s unit with its 
GCOS 7 line of mainframes. 


Sarbanes-Oxley Sparks 
Forensics Apps Interest 


Vendors offer monitoring tools to help 
identify incidents of financial fraud 


BY THOMAS HOFFMAN 
OST COMPANIES 
working on Sar- 
banes-Oxley proj- 
ects are focused 
on documenting their internal 
controls to meet the compli- 
ance deadlines that start tak- 
ing effect late this year. But 
the law’s requirements are 
generating interest in using 
computer forensics tools to 


help identify potential cases of 


financial fraud. 

For example, Avery Denni- 
son Corp. is piloting software 
announced last week by Over- 
sight Technologies Inc. that 
can be used to monitor fi- 
nance systems for irregular 
transactions. Mark Van Hols- 
beck, director of enterprise se- 
curity at Avery Dennison, said 
the software should reduce 
the amount of time workers at 
the Pasadena, Calif.-based 
maker of adhesive products 
now spend poring over print- 
outs of financial data to deter- 
mine whether any information 
has been altered or corrupted. 

Avery Dennison’s use of the 
Oversight tool wasn’t driven 
by the mandates of the Sar- 
banes-Oxley Act, Van Hols- 
beck said. But the technology 
should help the company sat- 
isfy components of the finan- 
cial reporting law, he added. 


Similar Conclusion 
Other users are expected to 
come to the same conclusion 
about computer forensics 
tools, which can track how 
data is used and modified. 
Meta Group Inc. analyst 
John Van Decker said he ex- 
pects to see an uptick in foren- 
sics technology investments 
related to Sarbanes-Oxley 
starting this summer. And 
Michael Rasmussen, an ana- 
lyst at Forrester Research Inc., 
estimated that about a third of 
the clients he works with have 


| other medical facili- 


put an investigative response 
plan in place, including the 
use of business intelligence 
tools and other technologies 
to monitor ERP and 

e-mail systems for ev- 

idence of potential 


| wrongdoing. 


Universal Health 
Services Inc., a King 
of Prussia, Pa.-based 
company that oper- 
ates hospitals and 


ties in various states, 
already has several 


| fraud-detection sys- 


tems in place that should now 


| be able to help it meet the 


mandates set by Sarbanes- 
Oxley, said CIO Linda Reino. 
For example, to prevent al- 
tered paychecks from being 
cashed, Reino said Universal 
Health has a homegrown sys- 


Bit Wests 
EU LE NY 
Crea le 
vest in forensics. 


tem running on an IBM AS/400 
server connected to applica- 
tions at the bank that supports 
Universal’s payroll operations. 
Manny Abascal, a partner at 
Latham & Watkins LLP in Los 
Angeles, said that continually 
reviewing financial data will 
be a key facet of Sar- 
banes-Oxley compii- 
ance. “Some compa- 
nies are thinking 
ahead so that if they 
find themselves in 
this position [where 
fraud is suspected], 
they’re better able to 
find the data,” he said. 
Pricing for Over- 
sight’s monitoring 
tools starts at $85,000 


, and, depending on the number 


of end users, can go up to 
about $200,000, according to 
CEO Patrick Taylor. 

Other vendors of forensics 
tools include Guidance Soft- 


ment Inc. and Addamark Tech- 


www.computerworld.cor 


Forensic Firsts 


GATHER input from business 
and IT managers on the kinds 
of data that should be moni- 
tored for fraud. 


DEVELOP an action plan for 
automating the process of 
checking systems for fraud 
and storing the results. 


CRAFT a formal response 
plan so you're not caught off- 
guard if fraud is identified. 


| nologies Inc., which this week 


plans to announce upgraded 


| software for storing system 
| log data (see story below). 


Mandalay Resort Group in 


| Las Vegas provides gaming 
| agencies with information to 
| demonstrate its data-protec- 


tion procedures. But CIO Tra- 


| cy Austin said those efforts 
| haven’t used computer foren- 


sics, and the hotel and casino 
operator hasn't made plans to 


| invest in the tools to aid in 


Sarbanes-Oxley compliance. 
For now, Mandalay “is primar- 


| ily focused on documenting 
ware Inc., Consul Risk Manage- | 


internal controls,” Austin 


added. @ 45779 


Software Emerges for Retaining System Log Data 


Until recently, there have been 
few options available for users 
looking for ways to store system 
log data to comply with laws on 
retaining records and controlling 
access to data But that's start 
ing to change 

San Francisco-based Adda- 
mark Technologies this week will 
introduce a new version of its 
specialized database for log in- 
formation, with new features de- 
signed to address the data- 
retention requirements of laws 
such as Sarbanes-Oxley, the 
Gramm-Leach-Bliley Act and the 
Health Insurance Portability and 
Accountability Act. 

Omnisight 2.0 will let compa- 
nies collect, compress, store and 
review event data collected from 
an array of systems and security 
devices, said Kevin Harahan, di- 
rector of product security at Ad- 
damark. The captured informa- 


tion can include application and 
transaction logs, Web activities 
and security event data 
Omnisight also offers capabil- 
ities for identifying violations of 
corporate policies, reviewing 
suspicious systems activity and 
performing forensic analysis for 
security purposes, Harahan said 
Addamark isn’t the only ven- 
dor offering such tools. Intellitac 
tics Inc., a Reston, Va.-based 
vendor of software for correlat- 
ing different security incidents, 
last month added a storage 
component designed to pre- 
serve raw data about security 
events in a compressed form 
Consul Risk Management in 
Herndon, Va., offers a similar 
product. Prices tor the tools typi- 
cally start at about $50,000. 
Such capabilities are crucial, 
said Troy Aswege, assistant vice 
president of information systems 


at Biue Cross Blue Shield of 
North Dakota 

As a Medicare provider in 12 
states, the Fargo-based health 
care organization has to retain 
certain types of log data for vary- 
ing lengths of time. It's now using 
Addamark’s software to collect 
the required information trom its 
mainframes and switches, and 
Unix, PC and Web servers 

“We're talking about thou- 
sands upon thousands of trans- 
actions daily,” Aswege said. 
“Without something like this, |'m 
not sure how we would be abie 
to do it.” 

Michael Rasmussen, an ana- 
lyst at Forrester Research, said 
compressing terabytes of raw 
log data to a fraction of its origi- 
nal size is much less costly and 
more efficierit than storing it in 
traditional relational databases. 

- Jaikumar Vijayan 
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Continued from page | 


Clarke 
ard A. Clarke, the Bush admin- 
istration’s former top adviser 
on cybersecurity, faulted the 
government's inability and 
cultural reluctance to share 
critical intelligence data. 
Those faults allowed key clues 
to al-Qaeda’s plans to go un- 
noticed, he claimed. 

And in an exclusive inter 
view with Computerworld af- 
ter the hearing, Roger Cressey, 
Clarke’s longtime deputy at 
the White House, said there 
are indications that the same 
problems are beginning to sur- 
face again. 

In his book Against All Ene- 
mies (Free Press, 2004), Clarke 
writes of the FBI’s lack of an 
IT infrastructure. “There was 
no way for one agent to know 
what information another 
agent had collected, even in 
the same office,” he wrote. 
“Local police departments ... 
had far more advanced data 
systems than the FBI.” 

That lack of IT support at 
the FBI played a direct role in 


Continued from page 1 


BrainShare 


here last week. The stack in- 
cludes file, print, storage, di- 
rectory, Web development and 
other services [QuickLink 


The company also an- 
nounced the availability in 
mid-April of an open beta of 
ZENworks 6.5 to 
manage both Win- 
dows and Linux 
desktops. 

The event’s 
6,000 attendees 
appeared to be 


overwhelmingly supportive 
of Novell’s adoption of Linux. 
Older NetWare users said 
they came to the show to 
learn about the new Linux 
management and operating 
system capabilities now be- 
ing offered by Novell, while 
many younger Linux develop- 
ers said they were glad to 
have Linux distributed by a 
major vendor with global 


MORE ONLINE — 


IBM and HP sign agreements 
with Novell on SUSE Linux 


@ QuickLink 45723 
www.computerworld.com 


RICHARD A. CLARKE claims that an inadequate IT infrastructure at the FBI 
helped two 9/11 hijackers with known al-Qaeda links get into the U.S. 


allowing at least two of the 
Sept. ll hijackers, who were 
known by the FBI to have had 
links to al-Qaeda, to enter 

the U.S. undetected by either 
Clarke’s office or the CIA, ac- 
cording to Clarke. 

“In retrospect, for [the FBI] 
to have had this information 
somewhere in the FBI and not 
told me I still find absolutely 
incomprehensible,” Clarke 
told the commission, adding 


sales and service forces. 

Dale Llewellyn, manager 
of enterprise applications at 
SPX Corp., said the Charlotte, 
N.C.-based industrial products 
manufacturer next month will 
deploy Novell software on 
27 Linux-based servers. The 
$2 million project, in which 
SPX will use Novell’s Nsure 
and Extend products for se- 
cure identity management, is 
expected to lower 
the company’s IT 
administration 
costs, he said. 

The directory 
services servers at 
SPX run on Red 
Hat Enterprise Linux 2.1, but 
an eventual migration to OES 
is “not out of the question,” 
Llewellyn said. OES will run 
the SUSE Linux kernel that 
Novell gained with its acquisi- 
tion of SUSE Linux AG in Jan- 
uary [QuickLink 42574]. 

SPX acquired 26 businesses 
last year and sought a cost- 
effective way to integrate op- 
erations, including 40 ERP 


that he has a complete lack of 
confidence in the agency. 
Samuel Berger, President 
Clinton’s former national se- 
curity adviser, testified earlier 
in the day that “the mecha- 
nisms of information sharing 
within the FBI and between 
the FBI and the rest of the 
government were even worse 
than I thought they were.” 
The FBI's inability to share 
data was in stark contrast to 


systems, with a focus on se- 
cure identity management, 
Llewellyn said. 

Brian Moss, senior systems 
engineer at Cardinal Glass In- 
dustries Inc. in Eden Prairie, 
Minn., said he came to Brain- 
Share to learn all he could 
about the open-source MySQL 
database, which he wants to 
use to replace Microsoft Corp.'s 
SQL Server as a means of low- 
ering costs. The glass manu- 
facturer has about 80 servers 
running NetWare and Novell 
ZENworks products that serve 
1,000 employees, he said. 

“T just hope Novell will keep 
going with this Linux vision,” 
said Moss, who began using 
NetWare in the 1980s. “It’s def- 
initely positive.” 

Fredrik Carlsson, an integra- 
tor at Iftech Network AB in 
Goteborg, Sweden, took note of 
the young faces of the Linux 
developers at the conference 
and commented on how they 
and the Linux products are al- 
ready helping revitalize Novell. 

“I’m here to learn anything 


other agencies that routinely 
filled his secure e-mail in-box 
with hundreds of reports daily, 
Clarke said. Perhaps more im- 
portant, Cressey said that 
while there was an initial peri- 
od after Sept. 11 during which 
the FBI was improving its ca- 
pabilities, agents and intelli- 
gence officials are now telling 
him that they’re starting to see 
“a retrenchment” into old 
habits. “The walls that came 
down after 9/11 seem to be go- 
ing up again,” he said 


Conflicting Outlooks 
Although the hearing was 
flush with partisan attacks 
against Clarke's alleged hid- 
den motives for releasing his 
book — a scathing critique of 
the Bush war cabinet — dur- 
ing the presidential campaign, 
Clarke stayed on message, 
claiming that his attempts to 
raise awareness of the terror- 
ist threat were repeatedly 
stymied. 

At one point, he said, he be- 
came so frustrated with the 
cultural and political obstacles 
to improving homeland secu- 
rity and data sharing that he 


I can about Linux,” Carlsson 
said. “Linux is a good direc- 
tion and is a really nice mix 
for the NetWare crowd. Net- 
Ware is clean and cheap, and 
my customers are always ask- 
ing why the Windows clients 
have to be so expensive.” 
According to Novell CEO 


PUL ta A UEC (ci 

old and young alike - appeared to 

be overwhelmingly supportive of 
Umm mee 
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asked to be reassigned to the 
newly created position of ad- 
viser to the president for cy- 
bersecurity. 

“I thought cybersecurity 
was — and I still think [it] is 
— an extraordinarily impor- 
tant issue for which this coun- 
try is very unprepared,” said 
Clarke. “And I thought per- 
haps I could make a contribu- 
tion if I worked full time on 
that issue.” 

However, in his book, 
Clarke hints at a similar feel- 
ing of frustration working on 
cybersecurity issues — frus- 
tration that would lead him 
and Cressey to “quit the ad- 
ministration altogether.” 

Cressey said there were 
“striking similarities” between 
the frustration he and Clarke 
felt working on terrorism is- 
sues and the political obsta- 
cles they eventually came up 
against working on cybersecu- 
rity. “The watering down of 
the National Strategy [to Se- 
cure Cyber Space] was further 
confirmation that some peo- 
ple just were not serious 
about making this a priority,” 
Cressey said. @ 45781 


Jack Messman, the company 
was able to advance the deliv- 
ery of what had previously 
been called NetWare 7.0 by a 
full year because of the re- 
sources it gained with the ac- 
quisitions of SUSE Linux and 
Linux desktop vendor Ximian 
Inc. Those acquisitions made 
available more than 200 addi- 
tional developers to port Nov- 
ell applications to the Linux 
kernel, Messman said. 

Pricing for OES won't be 
announced until late this year. 
However, Novell spokesman 
Bruce Lowry said existing Net- 
Ware maintenance and up- 
grade protection plan cus- 
tomers will be entitled to SUSE 
Linux Enterprise Edition. 

Pricing on ZENworks 6.5 
won't be disclosed until some- 
time after the public beta is re- 
leased, Novell officials said. 
The update will provide Ximi- 
an Red Carpet Enterprise and 
ZENworks Patch Management 
in one package for Windows 
and Linux desktop and server 
management. @ 45763 
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No More IT’ Projects 


O MORE WHAT? Have I lost my 
mind? No, just my tolerance for the 
stigma of slapping an “IT” label on 
projects that would be far better 
served by more accurate, less legacy- 


driven descriptors. Such 
as? How about “custom- 
er project,” “compliance 


project,” “supply chain 


project” or “process im- 


provement project”? 
Call it whatever fits 
best, as long as you avoid 
that dreaded tech label 
that continues to wall IT 
off from the business, 
making senior execu- 
, “Why does this 


cost so much?” instead 


tives a: 


of, “What value are we getting 
here?” We need to be moving briskly 
toward the day when business peo- 
ple stop viewing IT as a cost center 
and a resource albatross and see it 
for what it truly can be: a creator of 
value and a driver of change. 

Yet bridging the communication 
gap between business folks and IT 


people seems to be a never-ending 
tale of two steps forward and three 
steps back. That’s what it felt like to 


me last week, as I was reading yet 

another of those maddening stories 
about how IT and the business still 
‘an’t get their alignment act togeth- 
er [QuickLink 45598]. I swear we’ve 


every year since Noah led that first 
pair of aardvarks out of the data cen- 
ter and onto the ark. 

This latest alignment lament sur- 
survey of 200 IT man- 
agers by Deloitte Consulting and 


faced ina 


IDG Research Services Group (a 
Computerworld sister company). It 
found that a pitiful 10% of them feel 
that their companies are “extremely 
successful” at aligning IT plans with 
corporate strategies. And 65% of the 
survey respondents voiced com- 
plaints about the business folks fail- 


ing to communicate with them. 


MARYFRAN JOHNSON is 
editor in chief of Comput- 
erworld. You can contact 

her at maryfran johnson@ 
computerworid.com. 


Fortunately, there are 
some hopeful signs of 
change under way, 
which I saw firsthand 
last week at the Houston 
CIO Executive Summit. 
More than 400 CIOs and 
senior IT executives 
gathered to talk about 
leadership and the busi- 
ness alignment issues 
around IT governance, 
regulatory compliance, 
security and project 
management. 

‘We don’t have technology proj- 
ects, because all of our projects have 
elements of technology in them,” 
said Deborah Dinsmore, senior vice 
president and CIO at Sterling Bank, 
who spoke on a panel at the confer- 
ence. “The business units own the 
projects.” 

The same is true at Houston- 
based Smith International, which 
supplies products and services to oil 
and gas companies. CIO Jim Stanley 


said he makes a point of tying all of 
his technology spending to tangible 
assets and benefits. “We've been 
successful at getting the business to 
see technology as assets,” he said. 
“When you look at it that way, 
you're deciding if the investment is 
worth it — or if you’re throwing 
your money away.” 

At Burlington Resources, one of 
Houston’s largest oil and gas compa- 
nies, CIO Rick Diaz also considers it 
vital to move IT “beyond project 
oversight” and align it with the com- 
plex decision-making processes that 
drive the entire business. “IT proj- 
ects are business projects, and they 
need to compete with each other 
and with the alternatives,” Diaz not- 
ed. “Our governance council under- 
stands they can spend on IT or ona 
drilling project. What they have to 
ask is, ‘What will be more transfor- 
mational for the company?’ ” 

And that’s exactly the question 
you want business executives to be 
asking about IT spending. 


Now, maybe it sounds like a minor 


move, this title tweak from “IT proj- 
ect” to “business project.” But the 
battle to align IT and business is be- 
ing fought one company, one proj- 
ect, one IT success story at a time. 


Why not get started now? @ 45747 
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Start With 
Strong 
Contracts 


O YOU THINK you don’t 
need legal advice. 
You’re producing IT 
products and services, and 
you're reeling in customers. 
High fives and champagne all 
around. 
But you’re no lawyer, and 


you may not be aware that 
faulty software, a bum Web site or a 
clunky multimedia application can 
land you a hefty lawsuit. 

You need to protect yourself with 
contracts that have terms that guard 
against problems before they happen. 

Inadequate or nonexistent liability 
limitation can be a minefield. Four 
major areas typically trip up IT com- 
panies, according to 
Simon Halberstam, 

a London-based 
lawyer who special- 
izes in IT. 

First, imagine 
what things a cus- 
tomer might claim 
have gone wrong 
with your work. Your 
goal in constructing 
a contract should be 
to reduce liability if 
your software mal- 
functions. You don't 
want to be held responsible for cus- 
tomers’ lost business or for third-party 


PIMM FOX is a freelance 
writer in Santa Barvara, 
Calif. Contact him at 
pimmfox@pacbell.net. 


lawsuits. 

The second area involves potential 
investors, who will perform rigorous 
due diligence. Part of that will involve 
looking over your customer contracts. 
If you’re legally exposed, your chances 
for getting funding could be hurt. 

Third, board members and top exec- 
utives need indemnity insurance. But 
without the right contracts to guard 
the company, getting indemnity insur- 
ance might be difficult. 

Finally, the legal work-arounds that 
many high-tech firms take won't stick. 
Borrowing contracts or cutting and 
pasting contracts from one IT segment 
to another are plain dumb tactics. 
You'll find out how dumb when you're 
sued and your lawyer tells you your 
contracts are out of date. 
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By now you're wondering how much | 


this legal armor costs. 

Traditional lawyer fees can be a 
shock, but Halberstam has decided to 
be an IT entrepreneur himself, offering 
many of these contracts at reduced 
rates. A division of his firm, London- 
based Sprecher Grier Halberstam LLP, 
has developed a Web site (http:/ 
weblaw.co.uk/) where you can pur- 
chase services and contracts. There are 
different packages depending on the 


types of advice and contracts you need. 


Richard Wall, finance director at 


Staffordshire, England-based Advanced 


Network Technologies Ltd., uses Hal- 
berstam’s online repository for em- 
ployee contracts, terms and conditions 
for reseller agreements, protection of 
intellectual property, and the language 
in software licenses. 

Wall, whose company makes a desk- 
top deployment tool, said he prefers to 
sign up for a block of legal time that 
gives him access to Halberstam as well 
as to the contracts. 


“There might be cheaper stuff on the | 
said Wall, who does business | 


Internet, 
in the U.K. and South Africa, “but I 
wanted someone who specialized in IT 
law and was reassured the contracts 
were current.” 

Whether you go to the Web ora 
lawyer, make sure your contracts are as 
good as your software before you sign 
up your first customer. @ 45640 


DAVID MOSCHELLA 


Two Paths for 
The Future of | 


Computing 
T WAS ONE of those days 
when you wonder if 


you’re spending too much 
time on the conference cir- 


‘ Q | 
cuit. The topic seemed impor- | 


tant enough: the future of 
software licensing. But while 
the vendor panelists were all 


sufficiently rehearsed, it was 
obvious that they were struggling to 
find something new to say. 

The lady from Sun predicted that the 
emergence of a true open-source soft- 
ware stack would eliminate a huge 
chunk of today’s licensing costs. The 
gentleman from Salesforce.com argued 
that once software becomes a utility- 
like service, many of today’s software 








management problems will 
simply disappear. Inevitably, 
the chap from Computer 
Associates added that be- 
cause customers like choice, 
a variety of economic mod 
els will surely be required. 

All fair enough, but all 
things you’ve probably 
heard before. However, as I 
started to doodle and exam- 
ine the ceiling panels, it oc- 
curred to me that these 
themes are actually much 
more in conflict than they 
initially appear. While 
open-source software and utility com- 
puting have become the two most 
heavily promoted trends in IT archi- 
tecture, I hadn’t previously realized 
how fundamentally at odds these ideas 
really are. 

Consider that the desire for open- 
source software stems largely from the 
beliefs that customers often aren’t well 
served by closed, proprietary, single- 
vendor software and that making 
source code freely available can result 
in better, cheaper, more flexible prod- 
ucts. In contrast, the argument for util- 
ity computing is based on the assump- 
tion that customers should be shielded 
from the underlying complexity of 
software whenever possible. Effective 


Gauging tinea’ s Human Element 


LTE 


businesses should use ap- 
plications, not tinker with 
programs. 

These two philosophies 
suggest sharply different 
future scenarios. The open- 
source community believes 
that by banding together, 
the world’s programmers 
can break the hold suppli- 
ers have traditionally had 
over the IT business, great- 
ly reducing both software 
licensing and switching 
costs. Utility computing 
presents a much more ven- 


| dor-friendly vision, where suppliers 


are largely responsible for technology 


| development and delivery. 


Stated bluntly, in a services-driven 


| environment, there would be little real 


need for the open-source endeavor. 


| Vendors would be able to afford ex- 

| pensive development teams and pro- 

| prietary innovation, since the cost of 

| this work could be spread across a 
large number of customers. Converse- 
| ly, the more the open-source model 

| succeeds, the more likely it is that cus- 
| tomers will keep their IT work in- 


house, to the clear detriment of utility- 


| style providers. 


Of course, it’s hardly surprising 


| that, other than Microsoft, virtually 
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| all of today’s leading IT vendors — 

| IBM, Sun, Hewlett-Packard, Oracle — 

| enthusiastically support both models. 
Naturally, they want to shape each 

| approach to their advantage. Thus, as 
a rule, they support open-source ini- 
tiatives in those areas where they 

| don’t have a strong market position 
and promote utility computing where 
they do. Why would they behave 
otherwise? 

Consequently, the real question is 
which of these two visions IT cus- 
tomers will find more attractive. In the 
end, neither will be an absolute win- 
ner, but the market impact of each will 
likely vary depending on the time 
frame. Over the next few years, the 
open-source community will prove to 
be the much more vital force, and the 

| utility/grid concept will be criticized 
for its excessive supplier hype. How- 
ever, a decade from now, the services 
model might well dominate, with 
open-source activity looking increas- 
ingly like a legacy domain. 

Sometimes the best thing about a 

| conference is simply the time you get 


| to think. @ 45170 


| WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site 
| www.computerworld.com/columns 
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| My firm deals with tens of thousands 
of customers. | can assure you that 


| Resource Request 


HANK YOU for publishing the 

article “Offshore Outsourcing 
Poses Privacy Perils” [QuickLink 
44910]. Organizations and their ex- 


ecutives swayed by “industry trends” 


continue to overlook the many hid- 
den costs and risks of outsourcing, 
both domestic and offshore. One 
significant risk absent from the 
articie is the impediments that 
offshore outsourcing presents to 
conducting background checks, 
which are done seldom enough in 
North America, let alone in other 
countries. 

Being able to ascertain precisely 
who will have access to critical, 


confidential and private information | 


| The Real Drivers 


is vital to being able to protect that 
information. Background checks 
can reveal important indicators of 
people's motives and character that 
ought to enter into the equation 


when evaluating outsourcing oppor- 


tunities and risks. Trying to conduct 
background checks of individuals in 
another country with very different 


laws, Cultural expectations and busi- 


| ness models amplifies the risks to 


information in the hands of third 


| parties. Contractual obligations be- 


tween corporate entities are cer- 


| tainly necessary, but contracts are 


| hardly sufficient to protect against 





| the human element, whether it’s the 
| owners and executives of a trusted 

| third-party company or the employ- 
ees and contractors working for that 
| company 


Sharon Polsky 


| President, Project Scope Solu- 
tions Group, Calgary, Alberta, 


info@projectscope.com 


ORRY, MR. CLINE. It's not that 
the privacy issues are over- 
blown but that the technology lead- 


| ers tend to focus on, well, technol- 
| ogy (“The RFID Privacy Scare Is 


Overblown,” QuickLink 44795]. The 


| result is that they allow technology, 


and not society, to drive decisions. 


we think they are real or not is 
immaterial. 

Bruce Boyce 

Director, MIS, Alexandria, Va. 
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| Outsourcing Isn’t 
Always the Answer 


ERTAIN THINGS, like compiler 
writing and Web development, 

| can be sent offshore, but most large 
| projects that automate business 

| functions are doomed to failure if 
outsourced. Business operations 
are too complex to be understood 


world. Developers must live and 
breathe with the people they are de- 


veloping applications for. It's the 


only way to truly understand how 


think otherwise are only deluding 
themselves. 


John Hemmer 
JA Hemmer & Associates, 





| Syracuse, N-Y. 


| they have privacy concerns. Whether | 


by someone on the other side of the 


businesses operate. Managers who | 


AGREE WITH letter writer Vishwa 
M. Bhargava that the market is 
very dynamic and workers need to 
| continue learn new skills [Readers’ 

| Letters, QuickLink 44674]. | only 

| wish that American companies put 
| more emphasis on retraining and 

| retaining rather than offshoring to 

| save a few bucks 

| Paul K. Dick 

| Former DBA, Columbus, Ohio, 
Pauld@sbcglobal.com 
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ONE DBMS 


GIVES YOU BOTH 


For your next generation of applications, move 
to the next generation of database technology. 

Caché is the post-relational database that com- 
bines high-performance SQL for faster queries and 
an advanced object database for rapidly storing 
and accessing objects. With Caché, no mapping 
is required between object and relational views of 
data. That means huge savings in both development 
and processing time. 

Applications built on Caché are massively scala- 
ble and lightning-fast. Plus, they require minimal or 
no database administration. 

More than just a database system, Caché incor 
porates a powerful Web application development 


environment that dramatically reduces the time to 
build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at thousands of the world’s 
largest hospitals. Caché is so reliable, it’s the leading 
database in healthcare — and it powers enterprise appli- 
cations in financial services, government and many 
other sectors. 

We are InterSystems, a specialist in data manage- 
ment technology for twenty-five years. We provide 
24x7 support to four million users in 88 countries. 
Caché is available for Windows, OpenVMS, Linux and 
major UNIX platforms — and it is deployed on systems 
ranging from two to over 10,000 simultaneous users. 


InterSystems » 


Eu. CACHE 


Make Applications Faster 


Try a better database. For free. 


Download a free, fully-functional, non-expiring version of Caché or request it on CD at www.InterSystems.com/robust 





QUICKSTUDY 
Data Cubes 


A data cube is a type of multidimensional matrix 
that lets users explore and analyze a collection of 
data from many different perspectives, usually 
considering three factors at a time. Page 32 
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SECURITY MANAGER'S JOURNAL QUOTE OF THE WEEK 
Reeling in the Security Recruits & Some pundits - and son 

Contrary to his low expectations, some high- vendors - rt that DBMSs have t 
quality prospects for security positions show me co ties, and that DBMS inno\ 
up at a weekend IT recruiting fair held by is either de or irrelevant py Trew 


- Curt A. Monash, columnist, page 36 






Vince Tuesday’s company. Page 34 


IT’S THREE O" K on a Friday afternoon 
Tim Hillyard is monitoring an ongoin 
intrusion into the network of a major financi 
institution in the Northeast. 
Hillyard, a former U.S. Army intel 
lyst, leads a team of a dozen cybersec y analysts 
all of whom are monitoring similar attacks. But nei 
ther Hillyard nor his analysts work for the financial 
firm that’s being targeted. Hillyard is a team lez 
Symantec Corp.’s Security erations Center (SOC) 
in Alexandria, Va. And the financial institution does 
not even know that anything unusual is happening 

Hillyard stares at a row of computer screens, all of 
which display a software application known as the 
Analyst Response Console (ARC). The color-coded 
user interface provides alerts and data to hel 
ysts focus on the most critical events at an 
moment. Working through the interface, the team of 
analysts then either enters recommendations that 
appear immediately in a client’s Web portal or advis- 
es an engineer to block specific traffic on a client 
network. 

“We bring in the source IP address, the source 
port, the destination IP address, destination port, 
protocol and the rule option,” explains Hilly 
responds to the attack in real time. “W f 
for are a few key things, such as what direction is the 
traffic going. Just by looking at the ARC dashboard, | 
can tell that this attack is an inbound attack on Port 
135. Then I can actually look at the rule settings for 
the firewall to see what it did.” 

Fortunately for the financial institution und 
tack, the traffic was dropped at the firewall 
if the traffic had been allowed into the network? 
cording to Hillyard, he could have then drilled 
the raw data being captured by t ; 
detection system. 

is is the data that is flying across the wire 

” he says as he digs through the packet data 

displayed on the screen. In this case, h 
code word meow, which indicates the preser 
Blaster or Welchia worm. “If this traffic had beer 
cepted, I could immediately open up an event t 
and assign it to the engineers to block the traffic and 
alert the client.” 

This process is repeated hundreds of times a day at 
the Symantec SOC — one of several such facilities 
used to manage security for customers in 65 coun- 
tries. A relatively small cadre of security experts in 
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Aninside look at how one of Symantec’s security operations 
centers protects clients from cyberattacks. BY DAN VERTON 






each center is using cutting-edge technology to bol- 
ster security and expand the capabilities of Syman 


tec’s customers around the world. Three shifts of ap 
Continued on page 


SETTING NEW NETWORK 
SECURITY PRIVILEGES 
FOR 860 USERS? THAT‘LL 
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Networks that Know 


These days, no network is free of threats. That’s why you have to assign network security privileges to everyone. 
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Employees, customers, and partners. You need to set an acceptable use policy that dictates what each of them can 
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and can’t access. Until now, you had to do this manually. 
Not anymore. Now you can do what Baylor University did. Implement an Enterasys Secure Networks™ solution with a 


unique, policy-based system that empowers the network to allocate resources based on specific users and their roles. The 


network “sees” who the user is and assigns privileges accordingly. This improved control also gives you more security. 


It’s all about giving you a smarter way to network with central, intuitive management. Find out more at 


networksthatknow.com/Baylor. Or ask any one of the many enterprise customers we’ve worked with for years. 
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in Symantec's SOC must react when a serious 
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Continued from page 23 

proximately a dozen analysts, and an equal number 
of security engineers, monitor more than 200 million 
alerts and device logs for 600 companies, many of 
which are among the biggest names in the Fortune 
500. To protect against the threat of social engineer- 
ing, Symantec declines to reveal the exact number of 
analysts on each shift. 


MISSION CONTROL 
Technology is what makes it possible for a staff of a 
few dozen to monitor vulnerabilities and attacks and 
to alert so many customers simultaneously within 
Symantec’s service-level promise of 15 minutes. 

A 42TB online data repository enables a relatively 
small group of analysts to continuously study attack 
trends across the entire Internet. Data from Syman- 
tec’s more than 20,000 points of presence on the In- 
ternet floods into the database, where it’s crunched 
and analyzed for virus, worm and other attack trends 
before major problems can arise. 

“We've created a neighborhood- 
watch program across the Internet so 
that if you do something against one 
of my customers, I can flag you global- 
ly across my entire client base in an 
automated manner as a known bad of- 
fender,” says Grant Geyer, vice presi- 
dent of managed security services at 
Symantec and manager of the SOC. 

This proprietary capability, which 
has been developed in-house by vy 
Symantec’s 30 software developers, 
extends the expertise of client compa- 
nies by providing deep correlation 
technologies that enable real-time 
analysis of the data being monitored 
by the security devices, Geyer says. 
“This offers clients a greater degree of 
security than they could ever do on 
their own,” he says, adding that most 
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Ra eee Les) UE LL GLeme Cle) 4 
over for Amit Yoran, who 
joined the U.S. Department 
of Homeland Security. 
Geyer’s analysts monitor 
security for 600 clients 
from an Alexandria, Va.- 
based operations center. 


| companies don’t have the resources to gather and an- 
| alyze that much data. “And that’s the value of man- 
aged security services: to add intelligence to the real- 
time aspect of computer security,” says Geyer. 

Visiting the Symantec SOC is a little like venturing 
aboard the starship Enterprise. Visitors pass through 
a secure circular outer chamber and then enter bio- 
metric identifiers and personal identification codes 
just to gain access to the client viewing area, located 
behind a large window. 

The centerpiece of the mission-control area is a 
large, rotating digital globe that provides real-time 
data on every country in which Symantec 
sensors are recording aberrations in In- 
ternet traffic that are targeting its clients’ 
networks. The feeds are color-coded from 
yellow to red, signifying progressively 
greater levels of standard deviation in the 
amount of traffic from a particular country. 

A number posted to the right of each country 
name indicates the number of unique IP addresses 
from which the SOC has recorded at- 
tacks during the past 24 hours. The 
system then maintains a running aver- 
age for 30 days. This enables Syman- 
tec to advise its clients when they 
should block traffic from a particular 
part of the world. 

Security engineers positioned in the 
center of the mission-control area act 
as remote administrators, conducting 
patch and performance management 
for clients. In many cases, they have 
control of the client’s security devices, 
such as firewalls and intrusion-detec- 
tion systems, and they can make con- 
figuration changes in real time when 
necessary. 

In addition to broadcasting news 
feeds from CNN, rotating screens to 
the right and left of the control room 





, vice presi- 





MORE ON THREATS 
For more Internet security 
information, visit our Web site 
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show different attack patterns that are occurring at 
various customer sites. Engineers sit in the middle, 
surrounded by analysts who are alerted every time 
a spike in a particular type of traffic is detected. 
“The technology normalizes, strips down all of the 
data to its bare essentials and then goes through a 
process of collating, aggregating and mining it so 
that an analyst sees simply the results of that data 
mining,” explains Geyer. 


THE INTERFACE 


Symantec has developed and deployed a variety of 
mechanisms for communicating threat information 
to customers and for ensuring that their client com- 
munications can be authenticated. 

For example, automated text-to-voice alerts allow 
for notification in less than 15 minutes of a client 
company’s entire global customer base and its regis- 
tered points of contact for emerging threats. In addi- 
tion, companies can receive e-mails about emerging 
threats with links to customized Web portals that 
provide more-detailed information. The Web portals, 
in turn, receive all of the current posted warnings, 
the Symantec Response team’s analysis of the emerg- 
ing threats and recommendations for action. 

RSA Security Inc. ID tokens authenticate client 
access to the Web portals, which allow clients to fur- 
ther restrict and customize access based on work- 
group. The same secure tokens are used through the 
phone system, which provides each analyst with a 
pop-up window on his computer that provides proof 
of authentication. 


THE BIG PICTURE 

Real-time analysis and early warning are big selling 
points for managed security services such as Syman- 
tec’s. Just as nothing an analyst does or types is al- 
lowed to disappear into the ether — every keystroke 
is recorded — so it is with the seemingly 
harmless events around the Internet that 
may eventually emerge as the next major 
worm or virus outbreak. Even minor 
events in distant parts of the world are 
monitored and studied for their potential 
effects on Symantec’s customers. 

Corilynn Arnold is one of the global security ana- 
lysts who performs such investigations. She says it’s 
her job to “look at the forest” as opposed to the indi- 
vidual trees that represent customer networks and 
systems. And that type of analysis is used to alert 
companies to potential problems, such as virus and 
worm outbreaks, sometimes weeks in advance of 
vulnerability announcements by software vendors. 

Today, Arnold is keeping tabs on a spyware worm 
that uses a freeware tool called NetDevil to remotely 
control systems. “Its intent is to propagate itself like 
any other worm, but it’s only doing it in a very selec- 
tive manner,” explains Arnold. “It’s kind of like being 
a bank robber and targeting only banks where you 
see a robbery in progress. That’s a change from 
worms in the past. The worms that we’re seeing now 
have auto-update features and are designed to create 
massive command-and-control networks.” 

And what about yesterday’s worms, such as Code 
Red and Blaster? They’re still alive and well and prop- 
agating, says Arnold. “ It’s like a human virus,” she 
says. “Nothing ever really dies.” @ 45487 
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The right management can put you in control of your infrastructure, 
not the other way around. 
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So long, mayhem. Managing on-demand computing is here. Unicenter infrastructure management software 
of your infrastructure so you can be more responsive to business. With autornation and self-healing ca 
help control costs and empower you to do more with less. Unicenter also lets your infrastructure r 

so your IT and business priorities are always in sync. Finally, it is based upon a service-oriented architec 


your IT environment, so your infrastructure is easier to manage. To learn how to get more value out of your infrastructure 
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me programming practices, 
Sabre Airline Solutions has reduced bugs and 


software products. 


ABRE AIRLINE SOLUTIONS 
had many years of experi- 
ence with its AirFlite Prof- 
it Manager, a big modeling 
and forecasting package 
that many airlines use to 
wring more income out of flight sched- 
ules. Even so, Release 8 of the software 
was four months late in 2000 after final 
system testing turned up 300 bugs. The 
first customer found 26 more bugs in 
the first three days of its acceptance 


testing, and subsequent joint test- | _ 


ing by Sabre and the customer un- FIFLD z 


covered an additional 200 defects. 


as upset with the quality as the 


www.computerworld.com 
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Deliver better software; and 
lice (0 (ose8 A721 0) an ae ULOM Mare LACUaeg A 
costs 


A big culture change was 
required. Staff initially resisted some XP 
el ga(h Teter 
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tion in bugs and maintenance costs, and 

customers received better software 


ment labs of Sabre Airline Solutions, 
part of Sabre Holdings Corp., a $2 bil- 
lion air-travel systems company based 
in Southlake, Texas. The software de- 
velopment firm has embraced extreme 
programming (XP), a controversial de- 
velopment framework in which testing 
precedes coding and programmers 
work in pairs. Sabre Airline Solutions 
has 62 software products with 13 mil- 
lion lines of code, and it claims that XP 
has dramatically boosted both the pro- 
ductivity of its 300 developers and the 
quality of their work. 

For example, fewer than 10 bugs sur- 
faced in Release 10 of its Profit Manag- 
er software in the two months after it 
began shipping to airlines in December 
2002. Now, 16 months later, just 100 de- 
fects have been found. Release 10 was 
written in Java, while Release 8 was 
written in C and C++. But Sabre says it 
was XP, not Java, that produced the 
dramatic quality improvements. 

And the initial benefits from devel- 
oping better code may be eclipsed by 
long-term cost savings, Karandikar 
says. For Release 10, Sabre assigned 
just three developers to support 13 cus- 
tomers, while Release 8 required 13 
people to support 12 customers. 

The evidence is anecdotal so far, but 
there are enough anecdotes at Sabre to 
make a compelling case for XP. In an- 
other project, the company converted 
the user interface of its AirServ airline 
cabin provisioning optimization system 
from C++ to Java for the Web, a 
two-year effort that required 
rewriting about 100 graphical 


grammer productivity jumped 


“Our Sabre person on-site was REPORT ‘user interface programs. Pro- 


customer was,” recalls Vinit 
Karandikar, a principal in Sabre’s Air- 
line Products Development group. 

Sabre’s experience with Release 8, 
which had almost 500,000 lines of code, 
isn’t unusual. Software quality guru 
Watts Humphrey, a fellow at the Soft- 
ware Engineering Institute in Pitts- 
burgh, estimates that commercial soft- 
ware typically ships with one to eight 
defects per 1,000 lines of code. 

But a lot has changed in the develop- 


| 


42% — as measured by the 


limi of labor hours required for 


each screen — after the development 
team switched to XP halfway through 
the project (see chart, next page). 

In yet another project, the Host Ac- 
cess Tool, which provides a common 
application programming interface for 
accessing legacy host systems and has 
15,000 lines of code, was written from 
scratch using XP practices and has re- 
mained bug free in the 20 months since 
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it shipped. Similarly, Sabre’s Peripheral 
Manager, which manages interaction be- 
tween host systems and peripheral de- 
vices, has 28,000 lines of code and has 
had just four bugs show up in 15 months. 


Establishing Best Practices 


Sabre Airline Solutions adopted XP in 
2001. With its new model, Sabre does 
iterative development in small, simple 
steps. The company uses two-week it- 
erations, and customers see a new re- 
lease every one to three months. Fea- 
tures, called “stories,” are expressed in 
user terms and must be simple enough 
to be coded, tested and integrated in 
two weeks or less. 

Automated unit tests (against the 
programmer’s criteria) and broader ac- 
ceptance tests (against customer re- 
quirements) must be passed at the end 
of each iteration before the next can 
begin. Unit and acceptance tests for 


each feature are written before the fea- 


ture is coded. If a developer has trou- 
ble writing a test, he doesn’t clearly 
understand the feature. 

Actual coding is done in pairs by 
teams in open labs, promoting collec- 
tive ownership of code, although indi- 
viduals sometimes do the simplest 
tasks. Programmers are re-paired fre- 
quently, often every day or two. They 
sign up for the tasks they want to do 
and the person they want to pair with. 

Every project team has an “XP coach” 
and an application subject-matter ex- 
pert called the XP customer. The XP 
customer stays in or near the program- 
ming lab all or most of the time. He de- 
cides on and prioritizes product fea- 
tures, writes the stories for program- 
mers and signs off on the results. 

“Refactoring” code — rewriting it not 
to fix bugs or add features but to make it 
less redundant and more maintainable 
— is strongly encouraged. Sabre says the 
concept hardly existed at the company 
before XP because it was too difficult. 

Finally, simplicity is paramount. The 
simplest things are done first, and code 
is never made more complicated in or- 
der to accommodate an anticipated fu- 
ture need that may never materialize. 

Brad Jensen, senior vice president for 
airline product development at Sabre, 
says the quality improvements come 
largely from XP’s continuous testing 
and integration. “Every two weeks what 
you've completed has got to be produc- 
tion-ready,” he says. “You code as you 
test. You actually write an automated 
unit test before you code the unit, so if 
bugs do creep in, you find out about it 
right then.” 

Damon Hougland, director of airline 
products and services, says pair pro- 
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Adding Up the Savings 
Sabre’s effort to rewrite the GUls for its AirServ software took off after 


the company migrated to XP practices; productivity improved by 42%. 


Note: Sabre adjusted labor hours, normalizing for GU! compiexity, learning-curve effects and other factors. 


GT eee Gk Gael 


GUls rewritten 
Labor (hours) 
Hours/GU! 


87 
23,531 
270 


91 
17,276 
190 


Productivity gain: 42% 


ats Sa 
Using XP cut defects dramatically for three software products. 


The biggest program, Profit Manager, to date has one-fifth the number of bugs 
found in the previous version. 


f __- Product___}f_ Lines of Code Pater 


Profit Manager Rel. 10 
Host Access Tool 


Peripheral Manager 


500,000 
15,000 
28,000 


Dec. 2003 100 
June 2002 0 
Dec. 2002 A 


Surviving XP Culture Shock 


“As soon as we implemented XP, we knew 
who our prima donnas were, because prima 
donnas can't survive in an XP environment,” 
says Damon Hougland, directer of airline 
products and services. “Some of them left the 
organization, and some adjusted and grew.” 

“When | heard about this, | thought, ‘If we 
do XP, I'm quitting,’ ” recalls Chris Shepperd, 
a senior programmer. “The accountability is 
higher, but that’s good once you get past the 
pride part of it and see it’s for the betterment 
of the team. And it’s helped my career; with 
cross-training, I've learned more than | would 
have sitting in my cube by myself.” 

Because some of the tenets of XP are 
counterintuitive, it's important at the outset to 


gramming is hard for some to swallow 
at first because it suggests that pro- 
gramming costs will double. But the 
method actually reduces cost, he says, 
because the extra time it takes to write 


a line of code is more than offset by the ! 


reduced effort required for testing, fix- 
ing bugs and maintaining the code. 
And, because at least two people 
know every chunk of software, and be- 
cause Sabre reassigns and re-pairs peo- 
ple frequently, there is always a backup 
on hand. “Everyone on the team works 
on every part of the system,” Hougland 
says. “You have the weaker people 
paired with the stronger people, and 





bring in knowledgeable and enthusiastic train- 
ers and coaches, says Brad Jensen, Sabre’s se- 
nior vice president for airline product develop- 
ment. Sabre contracted Object Mentor Inc. to 
give developers a one-week class on XP. Ob- 
ject Mentor spent another week sitting with 
programmers in the development labs. 

“| was very skeptical at first,” recalls Wes- 
ley Williams, a senior developer and XP 
coach. “Doing a lot of testing was good, but 
writing the test first was a little weird. And the 
pairing? That was going to slow us down.” 

But Williams says he was won over by the 
end of the one-week training class. “What | 
liked best was that we had some junior people 
on the team and they came up in skills very 
quickly. So the thing ! hadn't liked about pair- 
ing, | now saw as a huge advantage.” 

~ Gary H. Anthes 


business knowledge and coding knowl- 
edge are transferred very quickly.” 


Beyond XP 


XP doesn’t encompass all the practices 
that a software development organiza- 
tion should follow, Hougland says. “XP 
really focuses on what [programmers] 
do,” he says. “It doesn’t cover the tradi- 
tional project management you have to 
do with customers, such as customer 
communications, and a lot of the test- 
ing we do is not covered in XP. A lot of 
people try XP and fail because they as- 
sume that XP will do everything for a 
development methodology.” 
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Sabre doesn’t yet follow XP 100% 
XP doctrine says that both unit tests 
and acceptance tests should be auto- 
mated. Unit tests at Sabre are conduct- 
ed with the open-source JUnit testing 
tool, but many of the more complex ac- 
ceptance tests are conducted with 
manual scripts. “We've struggled to au 
tomate them, and we have made some 
progress,” Hougland says 

Jensen compares XP to the Capabili- 
ty Maturity Model for Software, saying 
XP covers many SW-CMM practices 
The difference, he says, is that CMM 
tells organizations what they should do 
while XP is more oriented to saying 
how to do those things. “CMM is all 
about management processes; it’s less 
about technical processes, the tech 
niques of coding,” says Jensen. 

Jensen, who sponsored the adoption 
of XP at Sabre Airline Solutions, says he 
considered using other so-called agile 
programming methods, such as Agile 
RUP, a version of IBM’s Rational Uni- 
fied Process; Scrum, an iterative, user- 
oriented methodology; and Feature- 
Driven Development. “None of them 
are as fully developed as XP,” he says. 

Jensen says he especially likes XP 
metrics because they come in user ter- 
minology rather than the technical jar 
gon of some methodologies. “With XP, 
we are checking off features and stories 
that I can understand like a business 
person,” he says. “There's a lot of in 
creased communication between the 
customer and the development team be- 
cause everything that’s being prioritized 
is in terms the user can understand.” 

Jensen acknowledges that his devel- 
opers deviate somewhat from pure XP 
practices. Sometimes the XP customer 
has to travel and can’t be in his lab full 
time, as XP doctrine demands; refac- 
toring old legacy code can be extreme- 
ly difficult; testing isn’t as fully auto- 
mated as XP would have it; and acute 
deadline pressure from customers can 
lead to cutting corners. 

But when asked if he has reservations 
about any of the 12 core XP practices, 
Jensen says, “They are all good prac- 
tices. The only thing you could possibly 
argue is whether you really can afford to 
do all of them all the time. But if there’s 
any compromising, it’s not intentional.” 
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SABRE’S BEST PRACTICES 


XP practices are just one part of Sabre’s development 
methodology: 
QuickLink 45633 


For a list of XP resources that Sabre’s programmers 
recommend, go to 


QuickLink 45634 
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DataCubes 


DEFINITION 


TECHNOLOGY 


A data cube is a type of multidimensional matrix 
that lets users explore and analyze a collection 
of data from many different perspectives, usually 
considering three factors (dimensions) at a time. 


ERP R TT 


This example uses sales figures from XYZ Co., 
which makes many kinds of widgets. For each 
sales transaction, we know four pieces of data: 


® Which types of widget were involved 
(style, color, size and so on) 


® Store or sales agent 
® Sales amount 


= Geographic region or territory 


In a real-world situation, we would also know 
many other data items, including: 


@ Quantity 
# Customer 


® Cost to XYZ for each widget 


= Order date 
@ Shipment date 


@ Method and cost of shipping 


Any of these pieces of data can function as 

a dimension in a data cube. We can take an 
two dimensions and produce a 2-D table (@). 
Thus we can correlate or track sales against 
individual stores or sales agents. Add in a third 
factor, such as price, and we can produce a 
3-D data cube (@) that allows us to see how 
much each store or sales agent is selling in 
addition to which type of widget. Swap in geo- 
graphy (®). and we can now see who is 


selling where. 


BY RUSSELL KAY 
HEN WE TRY to 
extract informa- 
tion from a stack | 
of data, we need 
tools to help us 
find what’s relevant and what’s 
important and to explore dif- 
ferent scenarios. A report, 
whether printed on paper or 
viewed on-screen, is at best a 
two-dimensional representa- 
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tion of data, a table using col- 
umns and rows. That’s suffi- 
cient when we have only two 
factors to consider, but in the 
real world we need more pow- 
erful tools. 

Data cubes are multidimen- 
sional extensions of 2-D tables, 
just as in geometry a cube is a 
three-dimensional extension 
of a square. The word cube 


| brings to mind a 3-D object, 


United #1 
United #3. $435 
Smith 


$360 
$248 


$174 


and we can think of a 3-D data 
cube as being a set of similarly 
structured 2-D tables stacked 
on top of one another. 

But data cubes aren’t re- 
stricted to just three dimen- 
sions. Most online analytical 
processing (OLAP) systems 
can build data cubes with 
many more dimensions — 
Microsoft SQL Server 2000 
Analysis Services, for exam- 








ple, allows up to 64 dimen- 
sions. We can think of a 4-D 
data cube as consisting of a 
series of 3-D cubes, though 
visualizing such higher- 
dimensional entities in spatial 
or geometric terms can be a 
problem. 

In practice, therefore, we of- 
ten construct data cubes with 
many dimensions, but we tend 
to look at just three at a time. 
What makes data cubes so 
valuable is that we can index 
the cube on one or more of its 
dimensions. 


Relational or 
Multidimensional? 
Since data cubes are such a 
useful interpretation tool, 
most OLAP products are built 
around a structure in which 
the cube is modeled as a mul- 
tidimensional array. These 
multidimensional OLAP, or 
MOLAP, products typically 
run faster than other ap- 
proaches, primarily because 
it’s possible to index directly 
into the data cube’s structure 
to collect subsets of data. 
However, for very 
large data sets with 
many dimensions, 
MOLAP solutions 
aren’t always so effec- 
tive. As the number of 
dimensions increases, 
the cube becomes sparser — 
that is, many cells represent- 
ing specific attribute combina- 
tions are empty, containing no 
aggregated data. As with other 
types of sparse databases, this 
tends to increase storage re- 
quirements, sometimes to un- 
acceptable levels. Compres- 
sion techniques can help, but 
using them tends to destroy 
MOLAP’s natural indexing. 
Data cubes can be built in 
other ways. Relational OLAP 
uses the relational database 
model. The ROLAP data cube 
is implemented as a collection 
of relational tables (up to 
twice as many as the number 
of dimensions) instead of as a 
multidimensional array. Each 
of these tables, called a cuboid, 
represents a particular view. 
Because the cuboids are 
conventional database tables, 
we can process and query 
them using traditional RDBMS 
techniques, such as indexes 
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and joins. This format is like- 
ly to be efficient for large 
data collections, since the 
tables must include only data 
cube cells that actually con- 
tain data. 

However, ROLAP cubes 
lack the built-in indexing of a 
MOLAP implementation. In- 
stead, each record in a given 
table must contain all attribute 
values in addition to any ag- 
gregated or summary values. 
This extra overhead may off- 
set some of the space savings, 
and the absence of an implicit 
index means that we must 
provide one explicitly. 


Other Considerations 
From a structural perspec- 
tive, data cubes are made up 
of two elements: dimensions 
and measures. I’ve already ex- 
plained dimensions; measures 
are simply the actual data 
values. 

It’s important to keep in mind 
that the data in a data cube has 
already been processed and 
aggregated into cube form. 
ee we normally don’t per- 
form calculations 
within a data cube. 
This also means that 
we’re not looking at 
real-time, dynamic 
data in a data cube. 

The data contained 
within a cube has already been 
summarized to show figures 
such as unit sales, store sales, 
regional sales, net sale profits 
and average time for order 
fulfillment. With this data, 
an analyst can efficiently 
analyze any or all of those fig- 
ures for any or all products, 
customers, sales agents and 
more. Thus data cubes can be 
extremely helpful in establish- 
ing trends and analyzing per- 
formance. In contrast, tables 
are best suited to reporting 
standardized operational sce- 


narios. @ 45491 
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Reelinginthe | 
Security Recruits 


Aweekend college recruitment program 
attracts some top-notch prospects for 
IT security positions. By Vince Tuesday 


LIKE TO THINK OF MYSELF 
as a dedicated worker, but 
I do have limits. I don’t 
mind weekend work if we 
suffer a major incident, but 
last weekend I was asked to be 
an assessor for my company’s 
college recruitment program. I 
suppose I could have declined, 
but my cooperation was ex- 
pected. I dragged myself into 
the office, along with my 
grumpy attitude. 

Our human re- 
sources department 
runs an annual pro- 
gram to recruit IT tal- 
ent from the best 
schools. HR reps visit 
the colleges and ad- 
minister a long multiple- 
choice exam to assess candi- 
dates’ technical, verbal and 
logical-thinking skills. We 
then invite the cream of the 
crop to our offices for a week- 
end of testing and interviews. 


Friday taking network, coding 
and personality tests. Then 
the candidates with scores in 
the top 10% were put up ina 
swanky hotel for the weekend. 

Saturday was filled with a 
series of team-building chal- 
lenges followed by interviews. 
My job was to assess the can- 
didates’ performance in the 
team challenges and interview 
them to see how well they 
would fit into our company — 
and my team. I don’t have any 
permanent positions open, but 
I do have openings for a sum- 
mer intern and a nine-month 
placement. 

I’m sworn to secrecy about 
the challenges we put the can- 
didates through, but I can say 
that the teams all faced sur- 
prises halfway through so we 
could see how well they coped 


SECURITY 
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with stressful situations. 
The team scores they got in 


| the challenges didn’t matter. 


We were looking for individu- 
als who displayed leadership, 


| negotiation ability and sensi- 
| tivity to others during the 
| team exercises, not the team 


that achieved the best result. 
The filtering at the earlier 


| stages worked; the candidates 


were all frighteningly bright. It 
was almost worth 
missing out on a free 
weekend to see 
them perform. But 
having so many stars 
on each team also 
led to friction. They 
were all pretty ner- 
vous, and I suppose the re- 


| viewers wandering past with 


clipboards didn’t help. 
The teams had a tendency 


| to split into smaller groups of 
| people who agreed with one 

| another rather than reaching a 
The candidates spent all day | 


team consensus. I think they 
worried that if they gave in 


| from their original positions, 


we'd downgrade them. In fact, 


| the opposite was the case. 


After the challenges were 


| Over, we interviewed the can- 


We were looking 
for individuals who 
displayed leadership, 
negotiation ability and 
sensitivity to others 
during the team exer- 
cises, not the team 
that achieved the 
best result. 





didates. Each candidate had 
two interviews with different 
staffers. 

Certainly, these graduates 
had amazing résumés. I recall 
how little I'd done when I was 


| leaving college. The bar has 


risen since those days. All of 


| the candidates had started 


their own money-spinning 


| projects alongside their stud- 


ies or worked summers at 
prestigious companies. One 
had worked at Sun Microsys- 
tems building software devel- 
opment kits, and another had 
registered patents while work- 


| ing at IBM. 


Found Out 


| Nonetheless, one candidate 


who had started his own proj- 


| ect didn’t do well in our inter- 
| views. When asked to give an 


example of a risky decision 
that didn’t work out, he ex- 
plained that at his start-up, 


| he’d misrepresented early pro- 
| totypes to customers as fin- 


ished products but kept get- 
ting found out. 
When asked how he would 


| motivate team members he 
| didn’t have direct authority 
| over, this candidate said 

shouting and screaming would | 


be appropriate. He didn’t 


| make it into the final round, 
| although he might have fit in 


well with some of our high- 
powered developers. 

For the final round, we sent 
the candidates home and the 
IT teams started haggling 
about which candidates they 
wanted to hire. I snapped up 
a superb intern who'll be a 
great addition to our team. I 
also put in a bid for a slightly 
arrogant but astoundingly 
bright candidate, who I'll call 
Conner. 

Like most prospective em- 
ployees, Conner was a high- 


| powered developer, but he 


made it clear in the team exer- 
cises that he could accurately 


| WHAT DO YOU THINK? 





| spot the tricks we played on 


the teams. That ability is very 
useful in security, as you have 
to be able to guess what an at- 
tacker might try next. 

The other groups had been 
put off by his habit of ordering 
other team members about, 
but the ability to herd staffers 
in the right direction was an- 


| other green light for our IT 
security team. 


I didn’t interview Conner 
initially, and I didn’t know if 
he wanted to work in security. 
So HR asked him to stay for 


| the rest of the weekend and 


meet my team on Monday for 
further interviews. 
I was out of the office, so I 


| left messages for a few staffers 
| to interview him. Looking 


back, it was a mistake not to 
be there to introduce him. 


| When I returned, the staffers 
told me Connor was the 
| weirdest interview ever. 


“You were interviewed by 


| Vince over the weekend. How 
| did that go?” the interviewer 
| asked. 


“No, I wasn’t,” Conner 
replied. True enough, I'd as- 


| sessed him only from afar. 
Looking a little confused, the | 


staffer continued with an easy 


| question: “OK, why do you 
| want to work in IT security?” 


“I don’t. I’m a developer,” he 
replied. Apparently, HR hadn’t 
told Conner anything about 
the job, so he didn’t realize 
what the position was or why 
it might suit his skills. 

But with that reply, the door 
closed on Conner getting into 


| the IT security team. The in- 


ability of HR to prepare him 


| and my dropping the ball by 


leaving it in the hands of oth- 
ers cut short his potential ca- 
reer with us. 

Hopefully, the team exercise 
experience and the morale 


| boost of being invited back for 


more interviews will stand 
him in good stead elsewhere. D 


This week's journal is written by a real 
security manager, “Vince Tuesday,” whose 
name and employer have been disguised 
for obvious reasons. Contact him at vince 
tuesday@hushmail.com, or join the dis- 


To find a complete archive of our 
Security Manager's Journals, go online to 
© computerworld.com/secjournal 
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Security Bookshelf 


How to Break Software Securi- 
ty, by James A. Whittaker and 
Herbert H. Thompson; Addi- 
son-Wesley, 2003. 


= See 
This book is not a nd 
hacker how-to . 


a} 
guide. Rather, it’sa p.°%,' 
to the fascinating 
field of software se- - 
curity testing. While 
software testing fo- 
cuses on required features, 
security testing considers the 
unintended things software 
might do. 

The book details 19 cate- 
gories of attacks that can be 
carried out against software. 
Some, like “manipulate the 
application's registry values,” 
are Windows-specific, but 
most are not. | found the cov- 
erage comprehensive and the 
style readable. 

The book also includes a 
CD with software tools, like 
Holodeck, that allow the tests 
to be carried out. | found this 
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iwantto $§tOp_ focusing on what's attacking my servers, 


and start orotate on attacking new markets. iN 
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Enigma App Now 
Runs on Linux 


Enigma Inc. in Burlington, Mass., 
last week released the latest ver- 
sion of its Enigma 3C service 
scheduling and content manage- 
ment application, which will now 
run on Linux. Version 8 Release 2 | 
is designed to help companies 
deliver parts and maintenance 
information, including online dia- 
grams and repair manuals, to 
their service staff members, ac- 
cording to Enigma. Also included 
in the new version, which starts 
at $250,000, is support for IBM 
WebSphere Application Server 
Version 5. 


Akonix Updates IM 
Security Product 


Akonix Systems Inc. in San Diego 
has added new dynamic update 
features to its Enforcer 3.1 in- 
stant messaging and peer-to- 

peer security application, which 
blocks unauthorized access to IM | 
and P2P networks. The dynamic 
protocol and program updates 
will eliminate system downtime 
and save staff labor time, ac- 
cording to the company. New 
features also allow Enforcer to 
keep up with the fast-changing 
protocol definitions used in the 
signatures of the major peer-to- 
peer and instant messaging ap- 
plications. Pricing for Enforcer 
3.1, which is available now, starts 
at $1,000 for 50 users. 


System Tracks 
Mobile Assets 


Teletouch Communications Inc. 
in Tyler, Texas, has launched a 
new generation of wireless mo- 
bile asset-tracking products with 
start/stop motion detection. In 
addition to traditional location- 
reporting features, these tracking 
products can notify fleet man- 
agers when a trailer is in motion 
and when it breaks a designated 
“geofence” (the borders of a spe- 
cific area, such as a terminal), 
Teletouch said. Pricing for the 





devices is less than $350. 
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Optimize What You 


Know 


OME PUNDITS — and some technology ven- 
dors — assert that database management sys- 
tems have become commodities and that 
DBMS innovation is either dead or irrelevant. 
They’re wrong. DBMSs haven’t stopped 


evolving, and they aren’t 
close to being all alike. 

In particular, the major re- 
lational DBMS vendors are 
pursuing technical differen- 
tiation in three important 
areas: 

Lower-cost analytical process- 
ing. DBMS vendors are en- 
hancing their query optimiz- 
ers to relieve much of the 
burden on database adminis- 
trators, as well as to directly 
improve query performance. 
They’re also improving proc- 
essing speed though specialized indices 
and materialized views. 

Real-time analytical processing. In some 
cases, these enhancements make it prac- 
tical to run analytics straight off a pro- 
duction database, greatly facilitating 
real-time analysis. This is especially im- 
portant in CRM, where it allows cus- 
tomer-specific pricing and confirmed 
product availability. Real-time analytics 
have also become cost-effective in some 
supply chain, logistics and portfolio/risk 
analysis applications. 

Nonrelational data types. Specialized data 
types are crucial to many applications — 
geographic data for marketing, mineral 
exploration and homeland security, or 
genomic data for drug research, for ex- 
ample. Text data is used for a broad 
range of search and document applica- 
tions. And among the horde of new 
XML-based applications, a small but 
significant fraction depends on actual 
XML data storage. 

Much of this differentiation is closely 
connected to the query optimizer, the 
brain of a relational DBMS. Any im- 
provement in how a DBMS processes 
queries — such as better parallelism, 

a new kind of index or a new kind of 
data type — must be understood by 
the optimizer, or the DBMS can’t take 


CUmT A. MONASH IS a con 
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advantage of it. 

All optimizers are not cre- 
ated equal, and understand- 
ing what a particular one 
does and doesn’t do gives a 
lot of insight into the capa- 
bilities of the overall DBMS. 
So to understand differences 
among DBMSs, it’s useful to 
know a bit about how opti- 
mizers work. 

For each query, the opti- 
mizer determines which in- 
dices and table columns 
should be read and joined, 
what kinds of joins should be used and 
in what order the joins should be per- 
formed. Modern query optimizers are all 
cost-based, i.e., the optimizer estimates 
the cost of each operation contained in 
each reasonable query path, adds them 
up and chooses the cheapest path. Costs 
are computed for I/O, in-memory pro- 
cessing and interprocessor communica- 
tion, based on summary statistics about 
the distribution of specific values in the 
underlying data. 

Unfortunately, these estimates aren’t 
perfect, so optimizers often fail to find 
the best query plan. Database adminis- 
trators then need to laboriously hand- 
optimize SQL code or optimizer parame- 
ters. In response, DBMS vendors are 
rolling out a slew of enhancements that 
help find and fix the worst of subopti- 
mized queries. And in another major aid 
to database administrators, optimizers 
are being exploited to recommend new 


indices and other database-tuning choic- | 


es, traditionally the province of third- 
party tools. 

The most direct benefits of better op- 
timizers are faster queries and lowered 
database administrators costs. But 
equally crucial are the advanced access 
methods that optimizers enable. For 
starters, every major enhancement that 
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lowers the cost of analytical processing 
depends on added intelligence in the 
optimizer. There are plenty of those; 
top-end DBMSs are replete with bit- 
maps, star-schema indices and more 
exotic aids to complex data-warehouse- 
style queries. 

Most important over time may be 
materialized views, supported by IBM, 
Oracle and Microsoft alike. These are 
precomputed query results, stored like 
actual tables and typically updated on a 
near-real-time basis. In principle, mate- 
rialized views can support efficient ana- 
lytic queries from within online trans- 
action processing databases in near real 
time without badly affecting OLTP per- 
formance or recopying or hiding the un- 
derlying transactional data. However, 
their widespread use depends upon opti- 
mizers that, at a minimum, can recognize 
views already created or, better yet, cre- 
ate new ones where appropriate. 

Support for nonrelational data types is 
also highly optimizer-dependent. Each 
new access method relies on its own in- 
dexing techniques, usually very different 
from those used for conventional rela- 
tional data. Selecting and joining these 
data types efficiently therefore requires 
that the optimizer have a good cost mod- 
el for a previously unfamiliar kind of in- 
dex. IBM and Oracle provide capabilities 
to define such cost models, with Oracle’s 
being the more flexible and comprehen- 
sive of the two. 

Almost any sizable enterprise is likely 
to benefit from at least some advanced 
DBMS capabilities. Potential advantages 
include easier tuning, faster analytic pro- 
cessing or support for nonrelational data 
types. With luck, the particular features 
you can best use will be implemented in 
your organization’s preferred brand of 
DBMS. But if they’re not, you may want 
to explore selective use of alternative 
DBMS suppliers. Either way, it’s worth- 
while to spend some time tracking de- 
velopments in database technology. And 
optimizers are a good place to start your 
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Methodical Merger 
Wachovia avoided disruptions 
and retained customers by tak- 
ing a slow and steady approach 
to integrating banking systems 
with its 2001 merger partner, 
First Union. Page 41 


Career Watch 

Oregon State University’s Curt 
Pederson fields reader questions 
about what it takes to reach CIO 
status. Plus, a look at demand for 
IT professionals with business 
intelligence skills. Page 44 
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OPINION 

No More Excuses 

CIO Michael H. Hugos says IT agility 
isn’t as difficult as so-called experts 
make it look. He offers four simple 
suggestions to get your company mov- 
ing in the right direction. Page 46 


It’sNot 


Wear... 


Peace 


WRITTEN PROPOSALS FOR NEW IT INVESTMENTS NEED 
TO BE SHORT AND CREDIBLE. BY ALAN S. HOROWITZ 


IRTUALLY all IT projects 
have one thing in common: 
They started off as a written 
proposal that sold the endeavor 
to upper management. Poorly 
written proposals usually result in 
unsupported projects, while a well- 
written pian can make the life of the 
CIO much easier. 

To make your proposals compelling 
sales pieces, first presell the proposal, 
recommends Gerry McCartney, CIO at 
the University of Pennsylvania’s Whar- 
ton School. That includes having con- 
versations about the project with other 
senior executives to gauge their reac- 
tions and hear their concerns. “Once 
you put things down in writing, it’s 
hard for people to change their posi- 
tions. They can more easily change 
during conversations,” he says. 

“At the beginning of the process, ask 
[your business units], ‘How much are 
you willing to pay for this?’ ” recom- 
mends Ken Hill, CIO at defense con- 
tractor General Dynamics Corp. in 
Falls Church, Va. Without this under- 
standing, business units may say 
they’re interested initially, only to back 


out when the cost analysis is done, 
leaving you to start again. “If I know 
what people have in mind, I can avoid 
multiple rounds [of proposal writing],” 
Hill says. 

Preselling also includes creating a 
strong partnership with the business 
units involved, says Bob Yale, an IT 
principal for institutional retirement 
plan services at The Vanguard Group 
Inc. in Valley Forge, Pa. The mutual 
fund company’s IT department goes 
so far as to call itself a “solutions 
provider” to the business units, to em- 
phasize its willingness to partner. 

Credibility is an essential ingredient 
for selling the proposal. “The credibili- 
ty of your sales pitch has a lot to do 
with the process you went through,” 
Hiil says. “You want to say ‘I looked at 
five different software packages and 
demoed this or that’ or ‘I spent a day 
or two to get this answer,’ vs. ‘I spoke 
to this vendor. ” It’s also important to 


SELLING SECURITY TO THE CFO 


How to make the case for more 
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get feedback from the right group of 
users — the ones whom management 
trusts, he adds. 

And keep the proposal focused on 
business. “I have never seen a proposal 
refused because it had too little tech- 
nology content, but I’ve seen proposals 
refused because they had too much 
technology and not enough business,” 
says Jack Keen, president of The De- 
ciding Factor Inc., a consulting firm in 
Basking Ridge, N.J. 

For senior executives, keep the big 
picture in mind. Don’t say, “If we do 
this, someone in accounting will have 
an easier time reconciling financials,” 
says Rick Schoenhals, senior director 
of IT for the NFL’s Denver Broncos. 
“It has to be tied to the organization’s 


Drivers 
And Risks 


The type of investment will dictate the 
proposals content. John Mahoney, a for- 
mer CIO and now an analyst at Gartner 
Inc., suggests addressing the business 
drivers and the risks, He divides IT invest- 
ments into the following three categories: 


Utility Investments 
They increase the efficiency of an exist- 
ing business operation, such as reducing 
the time it takes to complete manufac- 
turing steps. 

BUSINESS DRIVERS: Economies of 
scale and productivity improvements 


RISK: Low 
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Enhancement 
Investments 

They increase the effectiveness of an ex- 
isting business operation, such as insti- 
tuting a new process or working with 
new partners. 


BUSINESS DRIVERS: Low error rate 
in manufacturing, or improved customer 
service 

RISK: Moderate 


eee eeeesereereesoesese eeoreeeccce 


Frontier 
Investments 

They introduce an innovation, such as 
creating a product line or moving into 
new territories. 

BUSINESS DRIVERS: A unique capa- 
bility or competitive differentiator 
RISK: High 
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mission and not just somebody’s job 
function.” 

The key is to identify management’s 
current hot buttons. McCartney says 
that right now, managers are interest- 
ed in legal compliance issues because 
of recent corporate scandals; five 
years ago, compliance was of little in- 
terest. “Of course, [managers] always 
want to know how to make more mon- 
ey, but what are we about right now? 

A good CIO will be sensitive to that,” 
he says. 

Keen agrees, noting that IT people 
often take a narrow view. “If it’s a CRM 
system, they say it saves salespeople 30 
minutes a day,” he says. “That’s fine, 
but you need to go beyond the value to 
the immediate user. Why should man- 
ufacturing care? Why should HR care? 
Articulate the value in terms of the en- 
tire enterprise.” 


The Proposal Template 
Although proposals differ, nearly all 
contain certain information. They start 
with the executive summary. “You 

have to explain, quick, in one para- 
graph, why you are asking for the mon- 
ey, what you will do with it and what’s 
the benefit to the company,” says Dou- 
glas Lewis, senior partner at Edge Con- 


| sulting Group LLC in Atlanta. 


Think of this as the “elevator pitch,” 


| recommends Keen, the one you can 
| give your CEO during an elevator ride. 


The summary gets 10 times more visi- 
bility than the proposal itself, he says, 
adding, “Human beings want things 
summarized.” 

The executive summary is followed 
by a more detailed explanation of what 
you plan to do and how you plan to do 
it. “The senior executives normally 
won't read this, but their subordinates 
will, and it gives the upper execs a 
warm, fuzzy feeling that you know 
what you’re doing,” Lewis says. 

But don’t get overly caught up in de- 
tails. “The less complicated it is, the 
less detailed it is, the more likely it is 
to go through,” says Lewis. “The more 
padding it has, the more it makes peo- 
ple suspect.” 

How long is too long? Keen says that 
for a million-dollar project, eight to 10 
pages (plus appendices) is sufficient, 
whereas a $10,000 project needs only 
two or three pages. 

“If you have to spend more than 10 
pages explaining a project, you proba- 
bly haven't fully thought through the 
project,” says Rebecca Wettemann, an 
analyst at Nucleus Research Inc. in 
Wellesley, Mass. 

Edward Setar, director of IT at the 
Project Management Institute (PMI) in 





The Presentation 
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to senior executives: 


FIND OUT what the audience’s hot 
buttons are. 
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Cla 


END the presentation with a list of the 
next steps that will be taken, which adds 
pressure to make a decision. 


Newtown Square, Pa., says key points 
of the business case should include 


| the following: 


@ Organizational impacts, such as 
change in business processes or the 
number of job reductions. 

® Time frame, which is always very 
important to executives. 

® Costs, including initial investment, 


| one-time costs and ongoing opera- 


tional costs once the technology is 
implemented. 

® Payback metrics, which might in- 
clude return on investment, net pre- 
sent value or internal rate of return. 


Careful Metrics 

The business proposal will need some 
metrics, but be careful. Use data from 
vendors or consultants sparingly. “Say 
something like, ‘The vendor tells me 


| we'll get 10% improvement in efficien- 


cy, but I spoke to two users who got 
5%, so I'll assume 3%.’ This creates 
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credibility,” Wettemann says. 

“Understand what metrics your CFO 
is looking for, such as ROI, net present 
value and the like,” Wettemann contin- 
ues. She warns against building a busi- 
ness case on IT-oriented metrics such 
as total economic impact, return on 
opportunity and cumulative ROI. 

And if you can’t quantify something, 
don’t ignore it — something IT people 


| often do. Give best-case and worst 


case scenarios. 

“There’s always an investment be- 
fore a payoff, and a lot of times people 
focus on the payoff and not the invest- 
ment, which is the cost of the project’s 
implementation,” says Marcy Wintrub, 
vice president of technology infra- 
structure services at State Street Corp., 
a financial services company in 
Boston. Pay attention to the costs of 
transitioning from the old to the new, 
including the cost and risk of doing 
nothing, she adds. 

Finally, establish an exit strategy 
from the beginning, recommends Gen- 
eral Dynamics’ Hill. If you don’t, you 


| could be deep into the project and 


find that it’s in trouble, and you'll have 
to fight to get the project completed. 
You can’t be objective about an exit 
strategy under those circumstances, 
he says. 

And if the proposal is shot down? 
You can still come out ahead if the pro- 
posal was credible. “Even if turned 
down, what IT gains is that it’s taken a 
leadership role and identified to exec- 
utive leadership there are opportuni- 
ties available,” PMI’s Setar says. “IT is 
not just waiting to be told what to do.” 
@ 45460 


Horowitz is a freelance writer in 


| Salt Lake City. Contact him at 


alan@ahorowitz.com. 
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Aslowandsteady IT integration effort helped 
Wachovia and First Union hang on to customers 
during their merger. BY THOMAS HOFFMAN 


WHEN BiG BANKS MERGE, Wall Street typi- 

cally looks for a speedy integration of 

operations to obtain millions of dollars 

in cost savings as fast as possible. But 

executives at Wachovia Corp. took a 

very different approach when the bank 

merged with its larger, cross-state ri- 

val, First Union Corp., in April 2001. 
Although Charlotte, N.C.- 

based First Union had grown 

steadily through acquisitions 

since the 1970s, the bank had 

suffered a major blow following 


its April 1998 purchase of Philadelphia- | 


based CoreStates Financial Corp. First 
Union had rushed to convert Core- 
States customers to a new branch- 
banking environment called Future 
Bank, but the abrupt change confused 
and irritated many customers, which 
led to higher-than-normal attrition 
rates and lower earnings. 

“The rushed integration was the 
heart of the CoreStates problem,” says 
Jean Davis, senior executive vice presi- 
dent of IT, e-commerce and operations 
at Wachovia. So instead of trying to 
meld their systems and operations to- 
gether within a year, as is common 
with many big bank mergers, Wa- 
chovia and First Union executives opt- 
ed for a more methodical integration 
effort over the course of two and a half 
years. The goal was to leave more 
room for systems testing, prevent op- 
erational disruptions and maintain 
customer satisfaction. 





“This deal was too big for us to use a 
big-bang approach, so we broke it into 
pieces,” says Frank Robb, Wachovia's 


| chief technology officer. 


The slower integration approach 
appears to have paid off. While there 


| were some negligible customer defec- 


the deal was announced, the ra- 
tio of accounts opened vs. ac- 
counts closed improved steadily 
throughout the integration ef- 
fort between April 2001 and 
August 2003, says Davis. 
The prolonged integration effort 


| went so well that financial industry 


analyst George Tubin at Needham, 

Mass.-based TowerGroup touts it as 

“the blueprint for future deals.” 
“From a market perspective, [Wa- 


For the integration effort, teams 
from Wachovia and First Union had to 
decide which of the two companies’ 
systems would prevail for each opera- 
tion, such as direct deposits or check 
processing. As it turned out, whichever 
system could handle a larger process- 
ing volume was chosen at least 80% of 
the time, says Davis. 

One exception was the adoption of 
Wachovia’s mainframe-based check- 
imaging system. Although First Union 
had a considerably larger retail bank- 
ing presence, the Wachovia system was 


| one of the first in the nation to offer 


customers online access to imaged 


| checks. Plus, Wachovia's 5-year-old 
| system was more stable than the dis- 


| tributed system that First Union began 
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using about six months prior to the 
deal, says Davis. 

“Rarely did we take Option C and 
buy a new system, given the risks and 


| costs that this would pose during the 
integration process,” says Martin 
| Davis, Wachovia’s corporate CIO. 


| Steady Progress 
Wachovia executives also decided to 


tions in the first couple of months after | 
| using a state-by-state approach, work- 


convert customers to various systems 


ing from south to north beginning with 
Florida in November 2002. The rollout 
included extensive systems testing and 
employee training to help customer 


| service agents respond quickly to 


chovia] really focused on the customer, | 


| with as little customer impact and as 


little customer loss as possible,” says 


| Tubin. 


questions about products and services. 
Florida is the biggest state in which 

the combined First Union/Wachovia 

operates, but it’s also the smallest in 


| terms of the number of branches that 


had to be converted, says Robb. The 
bank decided to build on its experi- 
ences there and move on to states like 


North Carolina and Virginia, where 
| the banks handle larger transaction 


| volumes, according to Robb. The state- 
| by-state conversion effort was com- 
| pleted in Virginia last july. 


The new Wachovia was also careful 


| during the integration effort to try to 
retain top-performing staffers, includ- 


ing its IT workforce. About 150 to 200 
IT workers have left the bank since the 
merger — a relatively small number 
for a big bank merger. About 75% of 
those people were laid off, and the re- 
mainder left voluntarily, Jean Davis 


| says. Most of the affected workers 


were doing application development, 
an area “where we had more people 


| than were required,” she adds. 


Of the IT staffers who were let go, 
the split was roughly 50/50 between 
First Union and Wachovia employees, 
Davis says. “We had a stated philoso- 
phy that neither company would take 
too big a hit,” she explains. 

Still, Davis acknowledges that there 
were some tough times during the in- 
tegration. Some of the bank’s 4,500 
global IT workers were regularly asked 


| to work around the clock and do sys- 


tems conversion testing on weekends. 
Wachovia took a couple of steps to 
help prevent employee burnout. For 
instance, following the Florida conver- 
sion, many IT workers on the systems 
conversion team were given a few 
weeks off over the holidays to spend 


| time with their families. And after the 


Virginia cutover last July, Wachovia IT 
workers were given extra time off in 
August “to recharge their batteries,” 
says Davis. 

In the end, Wachovia was able to 


| meet its goal of generating $890 mil- 
lion in annual cost savings over a 

| three-year period — and it even gave 
| back some of the budget money that 


had been allocated for the integration 
effort, she says. 
More important, the orderly ap- 


| proach enabled Wachovia to continue 


to deliver services to its customers 


| without any glaring disruptions. Says 
| Davis, “By taking the time to plan the 


integration, we made the right deci- 
sions to serve and retain our cus- 


tomers.” @ 45469 
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divisional ClOs, “but we’re making 
sure that we don’t have four different 
corporate loan systems in place,” says 
Jean Davis, senior executive vice 
president in charge of technology, 
operations and e-commerce at 


Wachovia. 

And six months ago, Martin Davis 
established a divisional information 
officer forum, a set of quarterly meet- 
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gy. “We have what we now call the 
seamless IT organization,” he says. 
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Social networking software 


can be used to make business 


connections that lead to new 


deals. BY ALAN S. HOROWITZ 


international 
venture capital 
firm 3i Group 
PLC wanted to 
buy part of the 
chemical business of a Ger- 
man company going through a 


management upheaval. The 


problem was that 3i’s German 
t 


eam lacked good contacts at 
the chemical company, says 
Rod Perry, 3i’s director of 
technology investing. 

So 3i turned to the social 
networking function of Inter- 
Action, a CRM product from 
Interface Software Inc. in 
Oak Brook, III. The software 
showed that, unbeknownst to 
3i’s German team, the firm’s 
Italian team had good contacts 
at the target company. The 
Italian team made the intro- 
duction, and a deal is now in 
the offing. 

This all came about thanks 
to social networking technol- 
ogy, which mines databases of 
contact names, interests, for- 
mer employers, colleges at- 
tended and other information 
to identify a network of ac- 
quaintances 

Like instant messaging, so- 
cial networking is a hot tech- 
nology that started in the con- 
sumer market (examples in- 
clude Friendster.com and 
Meetup.com) but has now 
emerged with business-orient- 
ed applications. It could turn 
out to be a big success in busi- 


ness — generating sales leads 
and connecting deal-makers 

- or it could flop like “push” 
technology did in the 1990s. 
But corporate IT managers 
should at least be aware of the 
phenomenon. 

In essence, social network- 
ing is “a search engine for 
people and relationships,” says 
Jas Dhillon, CEO and presi- 
dent of Santa Monica, Calif.- 
based ZeroDegrees Inc., 
which was recently acquired 
by online conglomerate Inter- 
ActiveCorp. Dhillon figures 
that his software cuts the aver- 
age time it takes a salesperson 
to reach a buyer by 35%. 

Antony Brydon, CEO and 
president of Visible Path Corp. 
in New York, claims that peo- 
ple using his software have re- 


% 


duced the sales cycle by 27 
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and increased the close rate 
by 22%, while the average deal 
size has gone up 10%. Efficien- 
cy is improv ed, he says, be- 
cause cold calls are replaced 
with personal introductions, 
and salespeople get access to 
decision-makers. 

That's how it worked for 
Curtis Estes, founding princi- 
pal at Strategy Benefits Group 
LLC, a financial planning 
practice in Los Angeles. 


Estes tried over and over 


again to meet a certain wealthy 


individual, without success. 
Then he went on Spoke, a so- 
cial networking service from 
Spoke Software Inc. in Palo 
Alto, Calif., where he found 10 
people on the network with 
connections to this person. 

Within days, Estes had an 
introduction. “I expect Spoke 
will increase our revenues by 
25% this year,” he says. “It 
saves countless hours and dra- 
matically increases our ability 
to get in front of our best 
prospects.” 


Inside or Outside 
The Firewall 


The technology comes in two 
basic forms: outside the cor- 
porate firewall for making 
public connections, or behind 
the firewall as sort of a giant 
corporate index-card file. 
Examples of the public ver- 
sion include services from 
LinkedIn Ltd. in Mountain 
View, Calif., and Ryze Ltd. in 


San Francisco. You register 
with a service, provide infor- 
mation about yourself and 
then upload information about 
people you know. 

If you want to meet some- 
one at a certain company ina 
certain department but don't 
have a name — like the head 
of sales at the company 
enter the target, and the soft- 
ware will search your con- 


you 


tacts, your contacts’ contacts 
(assuming they're in the data- 
base) and so on, usually up to 
a maximum of three to six de- 
grees of separation. 

If the service identifies a 
path from you to your target, 
you contact the person you 
know and explain why you 
want to meet the target, and 
then that person decides 
whether to pass your request 
down the line. 

Assuming that everyone is 
willing, your request finally 
lands in the in-box of your tar- | 
get, having been passed on by | 
someone the target knows. 

Ryze has given a boost to 
Un-Marketing.com, a Toronto- 
based marketing consultancy. 
Owner Scott Stratten reports 
that his firm has gained 15 
paying clients in the past six 
months from the service. 

Working behind the fire- 
wall, products such as Inter- 
Action, Visible Path and Zero- 
Degrees will mine only the 
contacts in your company’s 
database. 
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Cynthia Reaves, an attorney 
at Honigman Miller Schwartz 
and Cohn LLP in Detroit, says 
she knew of an executive at a 
prospective client whom she 
wanted to meet but had no 
contacts at that company. 

Using InterAction, Reaves 
learned that one of the part- 
ners at her law firm knew this 
executive; an introduction was 
made, and a six-figure deal re- 
sulted. “[InterAction] allows 
us to cross-market services 
from various departments,” 
she says. 


The Downside 

But privacy can be an issue, 
since the contact data may in- 
clude personal details and 
some contacts may not want 
to be pestered. The vendors 
deal with this by giving users 
the ability to limit what others 
can learn about their contacts 
and by allowing them to re- 
fuse to pass on a request for 
an introduction. 

Also, entering contact infor 
mation can become a time 
consuming hassle and a task 
that’s easily ignored once ini- 
tial enthusiasm wanes. Some 
products let users automatical- 
ly upload information from 
Outlook, Notes and other soft- 
ware programs. Others auto- 
matically scan e-mails and oth- 
er data for contact information. 

Participation requires 
“getting people to feel there’s 
a general personal advantage 
for them,” says 3i’s Perry. Even 
then, he acknowledges that 
people are lazy and prone not 
to maintain their contacts. So 
3i has trained assistants to en- 
ter business card information 
quickly, freeing their bosses 
from the chore. 

Despite the hype and hope, 
social networking is still an 
emerging technology. “It’s an 
early-adopter market now,” 
says Denis Pombriant, an ana- 
lyst at Beagle Research Group 
in Stoughton, Mass. “I think 
{social networking] is going to 
be important, but it may be a 
[CRM] feature, not a free- 
standing system.” @ 45456 
Horowitz is a freelance business 
and technology writer in Salt 
Lake City. Contact him at 
alan@ahorowitz.com. 
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Business Intelligence Skills in Demand 


ight out of 10 corporate 
CEOs are ready to pull 
the plug on all-out cost 
cutting and start spend- 
ing on IT again, accord- 
ing to a recent survey of 
456 chief executives conducted by 
Better business intelligence, espe- 
cially where customers are con- 
cerned, is a top priority. More than 
60% of executives polled said their 
companies need to do a better job of 
capturing and understanding cus- 
tomer data, and more than half pre- 
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Worth Repeating 


| firmly believe that in 

the future, IT leaders 

will be well-respected, 
well-grounded business people who 
happen to have a second discipline 
called technology. 


- JEFF CAMPBELL, ClO, BURLINGTON 
NORTHERN SANTA FE RAILWAY CO 


What’s becoming a 

common practice is for 

the CIO to come from 
the business. | think that’s a reaffir- 
mation that IT is all about business. 


FRANK MODRUSON, CIO, 
ACCENTURE LTD 


dicted greater customization of prod- 


way. Earlier this month, 34% of 
159 IT executives polled by Com- 
puterworld listed business intelli- 
gence projects as their most critical 
IT projects. By 2005, market re- 
search firm IDC projects that the 
worldwide market for business in- 
telligence software will total about 
$6 billion - up from $2.5 billion in 
2003 - signaling a major increase 
in business intelligence projects. IT 
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What three skills are critical to achieving | 


CIO status in an organization? This is an 
interesting question for me, especially be 
cause I've served in several CIO positions. In 
my case, most of my competitive hiring ad- 
vantage over other ClO applicants appears to 
be related to communication and relationship 
skills. | have never been the most technically 
savvy candidate, but I've been fortunate to 
have outstanding technical professionals 
working with me who were able to cover any 
technical weaknesses 


to reaching your goal 


www.computerworld.com 


relationships with staff, managers and those 
you serve. Nothing, in my opinion, has proved to 
be more important. In fact, when | became Ore- 


' gon’s first ClO (after two unsuccessful search- 


es), to a large extent my selection was related to 
the fact | was able to communicate with all the 
stakeholders involved in the selection process. 
Finding someone who had the support of the 
governor's office, legislature, agency heads, 
vendors, IT staff and agency ClOs proved most 
important to those making the hiring decision 

2. Once relationships are built, the ability to 
then leverage internal and external partners in 
support of new infrastructure projects, 
improvements and budget resources. The phi- 
losophy should be one of win/win or lose/lose, 
where everyone shares in the success or fail- 
ure equally 

3. Being technically a mile wide and a foot 
deep. You should know just enough technical- 
ly about all areas of IT to avoid being snowed 
and enough to be able to translate IT initia 
tives in a way that they complement the mis- 
sion of the organization 


How did you go about obtaining those 


| skills? The skills | have mentioned relate to 


good management and leadership skills 


' Many of these skills were learned and validat- 


ed by taking courses, reading literature and 


‘gaining experience. The fact that most of my 
‘education has been in business and public 

: administration appears to have been a plus at 
i the CIO level. If all things are equal in terms of 
' basic qualifications, most organizations will 
Here are the three skills | believe are critical 


' 


1. The ability to establish and maintain good | 


executives say the skills they need 
on business intelligence projects 
include systems integration, data 
modeling, database administration, 
data standardization and project 
management. 

“BI is not just about reporting but 
about getting data clean,” says Bob 


and put in the right format in order 
for it to be consumed by analytical 
applications.” - Julia King 


hire the person they best connect with or they 


1 think would best lead their IT organization 


@ 45455 


Does your organization plan to upgrade 
its analytical and decision-support 


capabilities in the next year? 


Base: 607 senior financial executives 


SOURCES: JOINT RESEARCH BY COMPUTER SCIENCES CORP. 


AND FINANCIAL EXECUTIVES INTERNATIONAL, 2003 





Network Configuration 
Best Practices 
Sponsored by: Voyence 


Watch, listen and learn as experts 
offer network configuration best 
practices. 


it's not about network security. 
It's about secure networks. 
Sponsored by: Enterasys 

Listen as experts discuss practical 
steps to reduce costs and ensure 
interoperability while guaranteeing 
network security. 


Advancements in Secure 
Remote Access Management 
Sponsored by: F5 Networks 


Discover a new generation of 
secure remote access solutions that 
provide mobile workers, partners, 
and contractors 24/7 access. 


Enforcing Network Security 
Layer by Layer 
Sponsored by: F5 Networks 


Learn what you can do at the 
application level and device level 
to protect your organization. 


Myths and Realities of SSL VPNs 


Sponsored by: Permeo 


Separate fact from fiction as 

experts sort out the advantages 
and disadvantages of SSL VPNs 
and IPsec based VPN solutions. 


M(t 


WEBCASTS 


Network Knowledge at Your Fingertips. 


Grab a front row seat as some of today’s most influential experts 
delve into the hottest networking issues and solutions. 


WEBCAST ROSTER 


internal Network Security: 
New Perspectives and 
Technologies 

Sponsored by: Check Point 
Software Technologies Ltd. 

Take a look at the internal security 
risks and vulnerabilities within 


your network, and best practices 
to address them. 


Intelligent SANS for Enterprise 
Business Continuity 

Sponsored by: Cisco 

Hear why disaster preparedness is 
a real-world necessity as well as 
explore the technologies and 


solutions that enable Business 
Continuity alternatives. 


From Structure to Chaos: 
Storage Management Secrets. 
Sponsored by: EMC 

Get the tools, tactics and techniques 


you need to gain control of your 
multi-vendor storage environment. 


The Components of a 
Successful Information 
Lifecycle Management Strategy 
Sponsored by: EMC 

Learn how to maximize the value 

of your information while meeting 
demanding business requirements 
across diverse applications, 
regulations, user needs and 
corporate policies. 


Secure Mobility: Anywhere, 
Anytime Access to Converged 
Services 

Sponsored by: Nortel Networks 


Organizations with freedom to 
move securely, move forward. Mere 
convenience is being supplanted 

by multimedia convergence. And 
the proactive are being substantially 
rewarded with productivity and 
savings. Learn how converged secure 
mobile communications can seam- 
lessly integrate into your enterprise 
to build a sustainable competitive 
advantage. 


Secure, Converged Mobility - 
Appropriate Access for both 
Wired and Wireless 


Sponsored by: Hewlett-Packard 


Ever-increasing security concerns and 
an increasingly mobile workforce are 
set to test the mettle of corporate LAN 
infrastructures. HP ProCurve secure 
mobility solutions provide precise 
control for both wired and wireless 
environments, including new WLAN 
products that offer state-of-the-art 
security. 


Control Your Webcast Experience 
Fully searchable « Clickable agenda « Available on-demand 
http://www.nwfusion.com/ITWPR 
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Rewards Network 
Appoints Cruz ClO 


Chicago-based Rewards Network 
Inc., a provider of loyalty pro- 
grams, last week named Mario 
Cruz vice president and CiO. He 
previously served as director of IT 
security and operations at Re- 
wards Network, and he has held IT 
management positions at Hotel- 
works.com Inc. and Xerox Corp. 


Topologe to Offer 
ClO, Audit Services 


Topologe LLC said last week that 
it will offer temporary CIC services 
to organizations seeking interim 
CiOs and to small businesses that 
require only a part-time ClO. The 
Burlington, Mass.-based company 
will also offer a variety of services, 
including IT and security audits, 
infrastructure planning and imple- 
mentation, security solutions, 
project management and disaster 
recovery advice. 


Scampas Joins 
Willis Group 


Jeanette Scampas has joined 
Willis Group Holdings Ltd. in New 
York as executive vice president, 
responsible for global information 
systems and operations. She will 
also serve as a member of the 
Partners Group, the insurance 
brokerage’s management team. 
Before joining Willis Group, Scam- 
pas held senior positions at Ameri- 
can International Group Inc., Bank 
of America Corp. and Chase Man- 
hattan Bank USA NA. 


Conseco Licenses 
CSC Software 


Conseco Inc. in Carmel, Ind., has 
licensed three integrated software 
products from Computer Sciences 
Corp. aimed at streamlining back- 
office processing and reducing 
costs. With CSC’s support, Con- 
seco will convert and replace 
more than 20 systems with CSC’s 
CyberLife, PerformancePlus and 
Visual Product/Modeling System 
software. 
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No More Excuses 


RECENT ARTICLE in Computerworld in- 
dicates that IT is struggling with agility 
[QuickLink 45244], while other articles 
have cited the diminishing influence of 
the CIO. As a CIO myself, I find this 
alarming. Why is IT struggling? Why are we losing in- 
fluence in business? I have some thoughts about that. 
IT is a tough job, but it’s no tougher than other jobs 
in business. The folks who run factories sure have a 
tough job; the people who handle customer service 


have a tough job; and for a 
really tough job, try doing 
what salespeople do. We IT 
people have had a privi- 
leged position based on the 
mystery and prestige of 
technology. 

In the past four years, 
that has changed, and now 
business wants us to be just 
as accountable as the rest 
of the company. That 
means no more excuses. 

The fact that we need to 
get the cooperation of end 
users in order to change 
business processes and be- 
come agile is nothing new, 
nor is users’ reluctance to 
give up their time from their real jobs 
and get engaged in IT. These situa- 
tions aren’t unique to IT, nor are they 
valid excuses for our failure. 

What would we think of salespeople 
who said that they couldn’t meet their 
quotas because customers and pros- 
pects didn’t want to make time to see 
them and understand their products? 
It’s the salesperson’s job to get out in 
front of customers and sell the bene- 
fits of the product. Isn’t this also true 
for IT? 

Many IT people seem to think being 
agile means using some new product 
such as portfolio management soft- 
ware. Agility arises from a state of 
mind, a way of looking at and respond- 


MICHAEL H. HUGOS is CIO 
of Network Services Co.. 
a distribution cooperative 

company in Mount 

Prospect, lil., and author 

of Essentials of Supply 

Chain Management 
(John Wiley & Sons Inc., 
2003). He can be 
reached at 
mhugos@nsconline.com. 


ing to the world, an ability 
to respond quickly and 
creatively to a continuous- 
ly changing environment. 
We IT people need to 
learn to use what we al- 
ready have in more effec- 
tive ways. 
-)» We need to improve our 
understanding of the busi- 
nesses that employ us and 
use Our common sense to 
figure out how IT can help 
our companies increase 
revenues or cut costs. It’s 
just that simple. 

It isn’t helpful for Meta 
Group, Gartner or any oth- 
er think tank to tell me 
how complex it is to achieve agility. To 
earn their keep, they need to start 
coming up with simple ideas that we 
can all work with. Let me offer some 
ideas of my own that my company is 


| successfully using: 


Quickly build systems that are good - not 


| perfect. There is an ongoing debate in 


many companies: “Should we build it 


| fast or build it good?” In this time of 


| 
| 
| 


rapid change, the answer is to build it 
fast. That means we should build sys- 
tems that are good enough to get the 
job done but resist the temptation to 
overengineer them or give them fea- 
tures to deal with every conceivable 
possibility. 

Let computers do the routine work. Use 


| 


computers to handle the repetitious 
processing of routine data related to 
basic transactions such as purchase 
orders, invoices, account balances, 
order status and address changes. 
Computers can do this sort of work 
much better, faster and cheaper than 
people can. 

Build high-volume and technically 
simple systems to support these rou- 
tine transactions. 

Focus peopie on handling the exceptions. 
Companies can build simple computer 
systems if they can use people to han- 
dle the complexity that these systems 
can’t handle. All the system needs to 
do is trap the data related to an excep- 
tion and alert a person to handle it. 

Exception handling is interesting. 

It involves thinking, communicating 
with others and problem solving. Peo- 
ple like doing this kind of work. Also, 
it’s in the exceptions to the standard 
commodity transactions that compa- 
nies find opportunities to increase 
their profits. 

Continuously adjust systems and process- 
es based on experience. An exception to 
a standard business process typically 
is due either to an error in the transac- 
tion data or to the emergence of a new 
type of transaction that the standard 
process isn’t equipped to handle. 

Regardless of the exception’s cause, 
there is a profit opportunity if an orga- 
nization can respond effectively. As 
people discover and eliminate causes 
of transaction errors, systems change 


| accordingly, so the systems infrastruc- 
| ture of an agile organization is contin- 


uously evolving. 
Our profession needs to drop the 
excuses. Nobody wants to hear them 


| anyway. We have a great opportunity 


now to be a central part of the success 
of our organizations in this new global 
economy we live in. Let’s get going. 

@ 45623 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 





f you check out just about any high-tech 4 
economic development 
country, there’s one category of work common to 
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IT Careers in BioTech/Pharmaceuticals 


zone across the 


all — biotech. The reasons are simple: millions of 


Americans aging, the opportunity for new 


medications and treatments, and the potential for 


jobs and prosperity. 


Karena Strella, principal for Egon Zehnder 
executive search firm and a biotech/pharma recruiter, 
says the pressure is on to find the skills and talents 


needed to move drugs to market more quickly 


and to move drugs through trials in an efficient 


and effective 


manner. 


“They're using 


technology to move them through these 


stages,” she says. 


The IT skills divide into several categories. 


There are IT skills needed to maintain the 


business enterprise, but also bioinformatics 


where data from trials and research becomes 


information. “We are seeing computer savvy 


people go back to acquire life sciences skills and 


experience to fill the demand for people,” 


Strella says. “We also 


are seeing more 





nnectivity. Req 
ent (based on edu- 
or work experience or 
both) in Mechanical Engineering 
or Electro-t anic Engineer 
ing with proficiency with Xerox 
DT135/6135/6180 and 4135, 
4635 printers, and WAN/LAN 
TCP/IP Ethernet, Linux FTP 
Storage, Fiber Gateway Print 
Server. 40hr/wk, 8-5 and shifts. 
Send resume to: Service Tech 
nologies, P.O. Box 13136 
Atlanta, GA; 30324 


PROGRAMMER/ANALYST 
sought by mortgage co. in 
Baton Rouge, LA. Requires 
B.S. in Computer Science 
or Systems Science plus 
exp. Respond by resume 
to: HR Mgr., X/W-#10, 
Aegis Mortgage Corp 
10049 N. Reiger Road 
Baton Rouge, LA 70809 


scientists who are, out of frustration, 
going into the tech side to develop 
the tools they need.” 


Strella says that 2003 was the 


lowest year ever in terms of job 
openings. “We're seeing 100% improvement 
this year in terms of assignments we're 
getting, as well as those our competitors are 
getting. The skill most in demand that we're 
hearing is for people who can lead technical 


and scientific people.” 


The investment in people and 
expansion is evident, from the 
building of a new headquarters 

campus for Cephalon, near Philadelphia, 

to Amgen’s February grand opening of its 

new research and development campus in 
Seattle. Amgen, the world’s largest biotech 
company, has information sciences and research 
positions available. The new research campus, 
known as Helix, combines more than 750 staff 
members from several different 


locations. It boasts of some of the 


latest tech advances in computerization and robotics 
in support of creating breakthrough therapies 
Stalwart companies such as Johnson & Johnson 
and AstraZeneca also continue to post jobs for 
positions as varied as data mining and technologists 
to support research and the business. 


Probably one of the most telling aspects of the 
available positions is that even the most senior 


research scientist listings for the companies 


include a formidable requirement for computer 


science/technology — languages, application integration 
and the like. 


Strella is quick to point out that while the firmly 
established companies offer opportunities, so too do 
startups. “Startup companies are gaining funding to 
move pharmaceutical therapies into trials,” she says, 
signaling the need for IT professionals with the 
complex skills required 
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software systems. Exp. must 
include 2 years working with 
Crystal Reports, Javascript 
and IIS. Mail resume, refs and 


salary reqs. to: Symbiosis 





International, 3965 Okemos 


Rot Sut 2 hoes is the place where your 

fellow readers are getting 

a jump on even more of 
the world's best jobs. 


A 
Puzzled? 


Now combined with 


itcareers.com 








can solve the | CareerJournal.com, 


labyrinth of 





you have more jobs 


job hunting by | 


to choose from. 








IT position. 


see for yourself at: 


Find out more 





matching the 
with the right Stop in for a visit and 
| | 


| 
} 
| 
| 


| j 
www. itcareers.com 





www.itcareers.com 


Computerworld +» InfoWorld + Network World + March 29, 2004 





PROGRAMMER ANALYSTS. 
SOFTWARE ENGINEERS. 
DATABASE ANALYSTS 
SYSTEMS ANALYSTS 


Leading IT Firm seeking software 
professionals to assist with soft- 
ware development 


Skills Needed : C,C++, Java, EJB 
J2EE, Info ca, Datastage 
SAS ,Peoplesoft, SAP, .Net 
Erwin, Webiogic, Websphere 
Oracle, MS SQL, DB2, Win NT, 
Unix 
Please apply with 2 Copies of 
Our company is hiri 
v ocat 
Pennsyivania: HRD, Vision Sys 
tems Group, Inc 2400 Gettysburg 
Rd Camp Hill, PA 17011; New 
Vision Systems 
100 Davidson Ave 
5 Somerset NJ 
HRD Vision Syste 
Group, Inc 111 6th Ave § 
Coon Rapids, IA 50¢ 


PROGRAMMER/ANALYST to 
analyze, design, develop, test 
and support animations for var. 
ious business management soft 
ware applications using MEL 
Scripting, Maya, Light Wave 3D 
and Project Messiah under 
Windows operating syster 
Create visual components of 
computer applications including 
modeling, texture mapping 
articulation (character setup) 
animation, lighting, layout and 

ndering. Require: Bachelor's 
degree in Computer nce 
Business Management, Busin- 
ess Adm or a closely related 
field with 2 years of exp in the 
job offered or as a Programmer 
Character Animator. Competitive 
salary offered. Send resu' to 
Cheri Cannon, Macquarium 
Inc., 1800 Peachtree St., NW 
Suite 250, Atlanta, GA 30309. 
Attn; Job KS 


T SPECIALIST t jes! 

implement, maintain < adi 
ister the company’s ation 
infrastructure, inc hard 
ware setup and ntenance 
software installation, configura 
tion and upgrades; network ad 
tration and trouble-shoot 
aluate and 


2 programming 
ical support for users 
s. Require: Bachelor's 

gree in Cc r 

mation 
ffered. Mai 
t, Microtir 
2 Lake Lynda Dr 


Orlando, FL 32817 


matior 
Science 
field and 
uding manage ) 
projects, programming 
languages such as Java, C. C++ 
Visual Basic HTML and appii. 
n development using rela 
tional databases such as Oracle 
MS SQL Server or MS Access. 
To apply please forward your 
resume to stoneer@corning.com 
and reference opening 9543. 


Software Engineers, Progr 
ammer Analysts Systems 
Analysts ( NH.) IT firm. Bach + 
1 yr of exp. for jr lvl posi’s, & 
Mast + 2yrs or Bachs +5yrs of 
exp. for sr. Iv posi’s. Skills req:- 
Java, Cobol, VB, ASP, NET. 
Oracle, Peoplesoft, Oracle 
Financials, PL/SQL Server 
Windows NT, Unix, C,C++ and 
testing. Amcat Dialer,working 
with PRI, DSI, protocols prefd 
Please apply w/ 2 copies of your 
resume to HRD, Worldwide 
Information Technology Serv- 
ices 155 Fleet Street 
Portsmouth, New Hampshire - 
03801 
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SOFTWARE ENGINEER (2 
positions) to design, develop 
implement, test and maintain 
application software using .NET 
Framework, C#, ASP.NET, XML 
SQL Server, VB, ASP, COM 
COM+, JavaScript, MTS and 
Oracle under Windows and 
UNIX operating systems. 
R ire M.S. 


Engineering discipline, or 
aly related field with two 
ars of experience in the job 
Extensive travel on 
assignments to various client 
sites within the U.S. is required 
Competitive salary offered 
Apply by resume to: Sudhakara 
Ravoor Sai Technical 
Services, Inc., 626 Wendover 
Drive, Ridgeland, M 39157 

Attn: Job SM 


Space Imaging seeks applica 
tions for the position of Lead 
Enterprise G 
Developer in Thornton, CO to 
design and manage enterprise 
Geographic Information Syst- 
ems ( ) software develop 
ment projects Requirements 
nclude a bachelor's in geogra- 
phy or geology; 5 yrs exp 
designing and developing GIS 
oftw applications including 
at lea signing geodata: 
stilizing ArcGIS 

s, ArcSDE, Geo- 

e, ArcIMS and UML 


deling methods; certifi 


Appiications 


cate in Geographic Information 
Systems. Respond by submit 
ting resume to Christine Skala 
Space Imaging, 12076 Grant St 
Thornton, CO 41 and refer. 
anced JON 4769A. 


* Lead Systems Analyst 
ng Incorporated in Corn 
NY, seeks Senior Lead 
Analyst to develop IT 
y creating new and 
3 existing software ap 
s for science anc 


ganization. Rec 


d rele 
> stages oO 
nan R & D environ 
Jata application develop 
ing SQL and/or 
nizing Manu 

Systems 


forward 


compu 
ja 
before or after « 
will be é Paid travel 
unanticipated client sites within 
2 U.S. is required. 8a-5p, M-F 
me t Corp. HR 
Systemtec, Inc., 246 Stoneridge 
Dr., Ste. 301, C bia, SC 
29210 


Systems Analyst Abbott 
Laboratories seeks qualified 
Systems Analysts, Database 
Administrators, Software Engin- 
eers and Software Specialists 
with experience in one or more 
of the following technologies 
SAP, ABAP. BASIS, RDBMS 
SUN UNIX, Solaris, Oracle 
AS/400, PL/SQL, Visual Basic 
C/C++, Windows, UNIX, SAS. 
HTML XML Java. JSP. 
JavaScript, Documentum, LAN 
Lotus Notes. Respond by mail to 
Abbott Laboratories, Dept. 323. 
Bldg. AP6D2, 100 Abbott Park 
Road, Abbott Park IL 60064- 
32537. An EOE. Refer to ad 
code: IT-KE 


Senior Operations Engineer 

wanted to be responsible for the 

specification, installation & con- 

figuration of revenue generating 

value-added products within live 
rf. operator networks 

provide expert site 

tech. support 

across all mobile tec 

incl. TDMA, CDMA, GSI 

resolving any issues w 

occur; resolve escala 

SSt 

wiin scheduled 

work p 

all live syste 

date with minimal 

service 

ware & softwai 

escalates to relevan 

3rd party vendor: 

first line of 

pre 

Ingres 

gateway s 

interfaces 

plattc 

knowled¢ 

Protocol, software & hardware 

lead a team of Engs. & maint 

ownershit 


issues are 
agreed Serv 

ments; review all call re 
reports prior to delivery t 
tomer & all m 


which 


based 
dards. Utilize 

odology within 
work. Prepare 


plans. 


development ? 
dures to support network 
toring and maintenance. Provide 
technical assistance t 
and Senior Network 
Bachelor's 
degree equiva 

Computer ance, MIS. 
closely relate i 
in the j 
Network 
Manage! 

gree and 2 years 
ence, a Master's degre 
puter Science will be acc 
Experience gained before, dur. 
ing and after degree will 
accepted. Must have CCNA cer 
tification. Send resume to 
Recruiter - Human Resources. 
AgFirst Farm Credit Bank, P.O 
Box 1499, Columbia, SC 29202 
(No Phone Calls Please). 


alee Beles 


Opportunity 


For over 20 years, Syntel employees across North America, Europe, and 
Asia have helped build advanced information technology systems for lead- 
ing Fortune 500 companies and government organizations to improve their 
efficiency and competitiveness. Today, Syntel professionals are building 
rewarding careers by providing solutions in e-business, CRM, Web Design 
and Data Warehousing. 


Come discover why Forbes magazine placed Syntel second on its list of 
“The 200 Best Small Companies in America” and Business Week ranked 
us #11 on its list of Hot Growth Companies. 


Due to our rapid growth, we have immediate, full-time opportunities for 
both entry-level and experienced Software Engineers, Consultants, 
Programmers, Programmer/Analysts, Project Leaders, Project Managers, 
Supervisors, Database Administrators, Computer Personnel Managers 
and Computer Operations/Account Managers/Account Executives with 
any of the following skills: 


Mainframe 
* IMS DB/DC or DB2, MVS/ESA, 
COBOL, CICS 


DBA 
* ORACLE or SYBASE 


Client-Server/WEB 

* Siebel 

* Websphere 

* Com/DCom 

* Web Architects 

* Datawarehousing 

¢ Informix, C or UNIX 

* Oracle Developer or Designer 2000 

¢ JAVA, HTML, Active X 

© Web Commerce ¢ Visual Basic 

© SAP/R3, ABAP/4 or FICO or MM © PowerBuilder 
& SD © IEF 


¢ Focus, IDMS or SAS 


* Oracle Applications & Tools 

* Lotus Notes Developer 

¢ UNIX System Administrator 

© UNIX, C, C++, Visual C++, CORBA 
OOD or OOPS 

© WinNT 

* Sybase, Access or SQL server 

* PeopleSoft 


Account Executives, Account Managers and 


Business Development/Account Specialist 
positions available. 


Some positions require a Bachelor's degree, others a Master's degree. We also 
accept the equivalent of the degree in education and experience 


With Syntel (NASDAQ: SYNT), you'll enjoy excellent compensation, full benefits, 
employee stock purchase plan and more. Please forward your resume and 
salary requirements to: Syntel, Inc., Attn: Recruiting Manager-LD03, 

525 E. Big Beaver, Suite 300, Troy, MI 48083. Phone: 248-619-2800; 
Fax: 248-619-2888. Equal Opportunity Employer. 


SYN TEL 


www .syntelinc.com 
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Software Engineer sought by 

network security device manu- 

facturer in Broomfield, CO to 

work in Broomfield and other 

anticipated job sites in the 

S at a senior level, design 

elop computer software 

ations which run on a 

ows platform and which ut 

COM/DCOM and network 

management protocols such as 

SNMP. Analyze requirements 
debug th 

2 C++. MFC and 

software develop- 


process. Requires mas 


progressive 
slopment expe 

software 

sing C++, MFC 

The 1 yr 

experi 

M 

may be con 


5 years required 


RAMME 


riented methodo 


X and Windows 


rk experience 


of the 


‘ ompetitive 
Send resume to 
Systems, Inc 
Plaza 


aretta 


al Engineers needed 
candidates po- 
ana/or 


work exp. Part of the req 


Ing qual 


work exp. must include 1 
yr working w/ VPN, VOIP, 
L2TP, & PPP protocols. Dut 
es include: Develop & test 

& Network Mgnt 

Data Comm 

Distributed Computing; Cre- 
ate functional spec. & imple- 
ment systems; Evaluate inter- 
face b/t HW & SW. Send res 
ref. & sal. req. to Impetus Sys- 
tems & Careers, 63 Pleasant 
St., Concord, NH 03301 


IT|Careers 


Software Developer/ Progra- 
mmer: For co. specializing in 
developing new Telephony & 
Internet products, responsible 
for client's project development 
of multi-media concurrent sys- 
tems involving data, speech & 
vision using Telecommuni 
ations & the Internet; analyze 
systems outlines; documenta- 
tion & testing; write solution pro- 
grams; correct programs. Req's 
Master of Science Degree in 
Comp Sci, Comp & Info Sci 
Engineering or a related field. 4 
yrs exp in job offered or 4 yrs of 
software development exp. Exp 
must include software program- 
& systems design. Exp 
gained while pursuing 

y in Java 

Windows, TCP/IP and 

Server Technology 
40hrs/wk. Send res. to C-11 
P.O. Box 1924, Phila., PA 19105. 


g for the following 
affices n 


Francisco 


Designer 

Programmer Analysts, Technical 
Arch nnical Consul 
Strategists 
Software 
Software Deve- 
SAP Consultant 


by email or fax only to 


Business 


Analysts 


Parkway 
IT 8 


City, L 


Telecommunication Analyst 
Chicago, !L. Advanced wire- 
less system engineering re 
search & analysis for GSM 
UMTS, WCDMA, satellite 


communication, softswitch 


Core network capacity & per- 
formance. New technology 
eval on, protocol valida 
tion in 3G, 2.5G & define 
architecture. BS Electrical 
Electronics/Comp & min 2 yr 
related exp. Resume L 
Glotel, 30 S$ 
Wacker Dr., Suite 3900 
Chicago, IL 60606 


Hormeku 


ymputer Contract Services, a 
growing company is look- 

ior Sr. IT staff. Applicants 
must have minimum BS with 3 
yr exp. using the SAS system 
Skills u SAS/BASE, SAS 
GRAPH, SAS/ODS are a strong 
plus on Unix & NT plat 
forms is req Contact 
ken.schmidt@ccsiteam.com. EOE 


System & network administrator 
wanted Pringing Ind. Of MI 
Servi Corp. Duties include 
system and network administra 
tion nstall and configure 
servers, user support. Must 
nave BS or equivalent with 
CCNA, MCP, MCSE. Please 
send resume to nick@print.org 
EOE 


QA ENGINEER I! Perform test- 
ing tasks on complex projects. 
Analyze & review Business & 
System Requirement/Design 
Specifications. Write test plans/ 
procedures & create Test Scripts 
w/ TestDirector 8.0. Create auto- 
mated test scripts for regression 
testing w/ QuickTest Profes 
sional 6.0/6.5. Proficiency in 
Test Director 7.6/8.0, QuickTest 
Professional 6.0/6.5, TD Explor- 
er, Batch Test Manager, Object 
Repository MergeTool, Load- 
Runner 7.0, Tight VNC Server 
1.2.8, RealVNC, XML, SQL 
Server Studio JE 3.0, SQL Editor 
(Informix) Extra 6.5 (Emulation 
Tool) Project Insight 

LDAP, Admin Tool, MS Access 
HyperSnap-DX-4 Netscape 
Browser 4.72 and I.E. 5.0/5.5 
6.0, Putty Tel and Visio. Send 
resume to: Diane Dull, John H 
Harland Co, 2939 Miller Road 
Decatur, GA 30035. 


Programmers, Software Engin- 
eers & DBAs: Analyze, design. 
develop, test apps. in (A) 
Microsoft.Net tech, Oracle/SQL 
Server/Sybase suites, Java 
suite Neblogic, Apache 
COBOL; (B) Documentum, ATG 
Dynamo, Weblogic, Java/Oracle 
suites and internet security/e- 
commerce analysis (C) Design 
administer and maintain data- 
bases in Sybase/SQL Server 
and Oracle. Please respond to 
Attn: Vipul Goel, NetAppl, Inc. 
2 San Ramon Valley Blvd 
Suite 4140, San Ramon, CA 
94583. EOE 


XAWARE, inc a 


development company seeks a 


software 


Sr. Software Engineer with 
expertise in developing e-data 


exchange applications. for 


secure, multi-user large-scale 

stems. B.Sc./Comp. Sci. with 
5 years exp. Experience with 
J2EE Sybase Application 
Server, Corba, and IBM XmiDiff 


highly desirable Forward 


resume to: Attn: Rohit Mital 
2060 Briargate Parkway, #150. 
Colorado Springs, CO 80920 or 
email to rmital@xaware.com 


Software Engineer to design 
develops, Implement client serv- 
er applications utilizing SQL 
Server, DB2, and Oracle exper- 
tise. Object-Oriented Analysis 
and Design with UML, C++ 
Java, SQL, PL/1, TERADATA 
HTML, XML, XSLT, NET devel- 
opment. Application Program 
ming, Development and admin- 
istration of multiple servers 
Developed and Tuned Data- 
bases on Unix and NT Plat- 
forms. Bachelor's degree in 
engg. Or equivalent five or more 
years of experience. Send 
resume to Triton Information 
Technologies Inc at 4 ORIOLE 
COURT, PLAINSBORO, NJ- 
08536 


IT|careers.com 


The World Of Work Is 
Changing Every Week. 


LUCKILY, WE ARE Too! 


itcareers.com is now powered by 
CareerJournal.com! 


Search for jobs and post your resume here 
on www.itcareers.com. Check us out! 


IT Education & Training Directory 


Contact the companies listed below 
to help you with your training needs! 


Computerworld + InfoWorld 


To place your ad please call 800-762-2977 


IPexpert, Inc. 

(866) 225-8064 

www.ipexpert.com 

CCIE (R&S, SEC, and C&S), CCSP, 
CCNP, CCNA, IP Telephony 


* Network World + March 29, 2004 


CBT Nuggets 

(888) 507-6283 & (541) 284-5522 
www.cbtnuggets.com 

Affordable training videos on CD 
MCSE, MCDBA, MCSD, CCNA, 
Citrix, Linux, A+, Net + 
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Software Engineer Web 
Technology: Perform Java appli- 
cation development using J2EE 
and UML, and Oracle databasi 
administration on a UNIX plat: 
form; develop and analyze 
requirements for digital st 
scriber line broadband portal 
infrastructure services and 
applications; devise sound 
architecture and technical solu- 
tions for complex and large 
scale software systems: imple. 
ment, test and deploy systems 
using Java portal framework 
application serv web servers 
and Oracle databases; perforn 
system management duties 
manage and support UNIX and 
Windows server systems, web 
servers and application servers 
perform configuration manage 
ment and release enginee 
duties, mane 1g source 
systems and system releases. 
Requires a Bachelors degree in 
Computer Engineering or 
Computer ience and either 
two years experience in the joh 
offered or two years experience 
in Java application development 
using J2EE and UML, and 
Oracle database administration 
on a UNIX platform. Salary 
$78,000.00 per year; 40 hours 
per week, 8AM to 5PM, Monday 
to Friday. To apply, submit two 
es of your resume to 


Case #200203749 
Division of Career Services 
Labor Certification Unit 
19 Staniford Street, 1st Floor 
Boston, MA 02114 


Computer Support Specialist 
Lexington Massachusetts 
Answer and resolve customer 
technical issues and ques 

concerning company’s configu 
ration management software via 
telephone and e-mail. Provide 
customer support follow 
through, and commitment to the 
customer Document repro 
duce and report product defects 
to Engineering 
technical support knowledge 
base by authoring Tech Notes. 
One (1) year Unix Server 
Administration 
Support Role, Networking 

Pascal and HTML Requires 
Bachelor's Degree in Computer 
Science or related. Two (2) 


years experience in the job 


Contribute 


Customer 


offered or two (2) years exper 
ence in the related occupation of 
61,079.00 
per yea Salary range $61,079 
$67,900 per year based on 
qualifications 40 hours per 
week 8:00am-5:00pm Send 
cover letter and resume in dupli. 
cate to Case #200400672 
Division of Career Services. 
Labor Certification Unit, 19 
Staniford St., 1st Floor, Boston, 
MA 02114 


Technical Support 


Trusted by more 
Maem DDE eter ns 
than any IT space 
in the world. 
Check us out at: 
MAY Mccain ts 


oF call 


(800) 762-29 


CWO032904N.5 
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Programmer Analyst (Micro 
Web) Multiple Openings 
Structured systems analysis 
design, development, testing 
quality assurance, implementa 
tion, integration, maintenance 
and support of integrated client- 
server based systems for busi- 
ness, financial, banking, man 
facturing and other commercial 
business application systems in 
a multi-hardware/multi-software 
environment using centralized or 
distributed relational database 
management systems, 4GLs 
(Fourth Generation Languages 
and other GU phical User 
Interface) NC tools 
Analysis, design and develop 
ent of t-server applica- 
tions g  object-oriente 
methodology. Bachelor's Degree 
quivaler Somputer 
Scien V Engineering 
Science/Business-Commerce 
and 1 yr. experience in job 
offered or as Software Engineer 
Systems Analyst are required 
Must have appropriate combina 
tion of skills as follows: 1 of A 
and 2 of B; or 2 of Aand 1 of B 
3 of A. A includes Oracle 
Sybase, Informix, SQL Server. 
Progress, Ingres, Access and 
Proxy Server; and B includes 
PowerBuilder, Visual Basic 
Windows, Visual C++ 
APT-SQL, SQL*FORMS 
C, GUPTA SQL, Progre 
Informix 4GL, Ingres 
Java, Lotus Notes, HTML 
lS, ASP, Front Page. 
Java Development Kit (JDK) 
High mobility preferred 40 
hrs/week, 8 am - 5 pm. $67,995 
$78,000 per year. Qualified 
applicants should contact or 


send resume to Site Manager, 
Beaver County CareerLink 
21 Ninth Avenue, Beaver 
Falis, PA 15010. Refer to Job 
Order # WEB 402707 


Unix System Administrator Dfn. 
dsn & impli ntwrk comm & soltns. 
P se & impimnt systm en- 
hancements (s/w & h/w updates 
that will improve the perfor 
mance & reliability of UN!X syst 
Systm admin of UNIX based 
hosts running Sun, HP-UX 
Linux & AIX. Dev & impli kernel 
scripts. Mng load config of cntri 
data comm processor & make 
recmndts for the purchase or 
upgrade Jata networks. Per 
form disk array config using 
Solstice DiskSuite & Veritas Vol 
ume Mngr. Reqs: BS or equiv 
in CS, Eng or rel + 4 yrs exp in 
job or as UNIX/System 
Admin/Eng or rel. must incl: Exp 
or crsewrk w/ system admin of 
Unix based hosts running Sun. 
HP-UX & Linux; script dev & 
impl; disk array config using 
Solstice DiskSuite & Veritas Vol- 
ume Manager. Salary: $50K/yr. 
Work Week: 40 hrs/wk; Job 
Location: Dubuque, IA. Must 
have proof of legal authority to 
work in the United States. Send 
your resume to the lowa Work 
force Center, 590 lowa Street. 
Dubuque wa 52004-0757 
Please refer to Job Order IA 
1101842. Employer paid adver. 
tisement 


offr 


SOFTWARE ENGINEER to 
design, develop, implement, test 
and debug application software 
using MS SQL Server, ASP.Net. 
VB.NET, Crystal Reports, MS 
Visual Studio.Net, MS Visual 
Source Safe, IIS and ADO.Net 
and on Windows XP platform 
Perform report structure design 
Create functional applications 
including front-end user inter- 
face, middle-tier logic and back 
end stored procedures. Require: 
M.S. degree in Computer 
Science/Engineering, or a close- 
ly related field with 2 yrs of exp 
in the job offered or as a 
Programmer/Analyst or Prog 
rammer,; Experience gained 
before or after earning the M.S 
degree will be accepted 
Competitive salary offered 
Send resume to: Gregory Jones. 
Hubbard Systems, 100 Union 
Hill Drive, Birmingham, AL 
35209; Attn: Job HV. 


Lanco global Systems Inc is 
looking _for professionals 
(Software Engineers/Progra 
mmer Analyst/Web Developer. 
QA Testers) with experience in 
following areas 


there of 


combination 


ERP - People Soft/ Peog 
HRMS, Oracle Mar 
FIN/HR Applica 
GEMMS & Systerr 
R/3,VBA, ABAP. 
BAAN 


OLEDB, SH 
CGI, PL/SQL 
cript 


travel to different sites 
We offer competit 
and benefits 


Mail resur 
HRD 
al Systems 
ward 
Suite 156 


Alpharette 


Senior ftware 
Req. Master's 

Sci. & 2 yrs. of exr 
or 2 yrs. of ex 
development 
XML. Exp 

new tech 


logical resea 


Msurance ap 
by end users 
ronment; & 
between cu: 

staff in writ 
cations. Develop 
cific modules 


sstry applicatio' 


software for 
based solutic 
base design 
& Oracle & integrate web-base 
solutions into legacy syster 
Send resur to Greystor 
Capital Group, LLC, P.O. & 


888595, Atlanta, GA 3035 


Software Engineer. (Irvine 

Req. a Bach.'s degree or 
foreign educ. in CS, Info. S' 

or Comp. Eng. & 

the job offered-or 3 yrs." ext 
IBM O/S mainframe applications 
devel. using TSO, Adabas 
Natural, & JCL. All statec 
must incl. using Cobol & VSAM 
database structures, incl. 2 yrs 
exp. w/automated scheduling & 
report distribution syste 
Work in independent fashion 
support easy to moderately 
complex projects in IBM O; 
mainframe applications devel 
environment using 

Adabas, Natural, & JCL 
hrs/wk. Apply w/resume & salary 
history to humanresource- 
sirv@zcsterling.com zc 
Sterling Insurance Agency, Inc 
9800 Muirlands Bi., Irvine, CA 
92618. EOE 


Computerworld 


ae Beton a 


NESS GLOBAL SERVICES, inc. 


ple positions 
and relocate 
IT industry, mus‘ 
ige and proficien 


ore of the 


DBA: Oracle 

ERP / CRM: SAP R 
Application Modules 
Applications and toc 
Broadvision 1, Ci 
Mainframe: UNISYS 220( 


Mid-range 
EDWARDS 
Client Server 
ASP 

Orac 


Microso' 


Programmer Analyst 


Sci., Engine 


Software Engineer Mai 

degre r a Bachelor's degree 

and 5 ars of post-baccalaure 
a Master's 

4 n Com Scien 

Engineering 3 

plus 2 years of work experie 


Project Manager Master's 
degree or a Bachelor's degree 
and 5 years of post-baccalaure- 
ate, prog ve work experience 
valent 
Computer 
g or related fie 
work experience 
‘oject Team Lez 
ject Manageme: 
t be knowledgeable 
ficient in estimating 
resources né 
project and 
project requirements 
Technical Recruiter: 
Bachelor's degree or 
yrs exp reqd Duties to consist 
jentifying and analyzing market 
© services in software consult 
provisions 
logy projects 
computer sys: 
ERP. RDBMS tc 
view and select tech 
staff. Negotiate contracts 
ih software consulting compa- 


ntify and subcontract 


ONLY QUALIFIED 5 iT! 
ZENS AND LAWFUL PERMA 
NENT RESIDENTS OF THE 
U.S. ould submit a resume 
and cover letter, indicating posi- 
tion applying ruit. Mgr. 
REF DE CW0304, Ness 

- ) 


Glob Services nc 16¢ 


Technology Drive, Canonsburg 
PA 15317 724) 745-7100 
Website: www.ness.com. Emai 
rectuiter.mar04@ness-gsg.com 


IT 


areers 
COMSYS is an established IT 
consulting firm that serves lead. 
ng corporations including 174 of 
the Fortune 500. With 
SYS you t Extensive 
Benefits, Additional Compen- 
sation for referrals. and 
Professional Challenges with 
training and assignments to 
keep you at the forefront of tech 
nology. With 28 offices, we need 
the services of experienced con- 
sultants across the US: 

Computer Programmers 

Programmer Analysts 

Systems Analyst 

Software Engineers 

User Support Specialists 

DBA's 

Business Analysts 

Project Leaders 


Submit resume to 
COMSYS 
3030 LBJ Freeway 
Suite 905 
Dallas, TX 75234 
www.comsys.com 
Fax: 972-960-0914 
EOE/M/F/DV 
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sive work experience 


Imagine the Possibilitie 


WHO WE ARE 


WHO WE SEEK 


PRODUCT ANALYST 


Req 


PROGRAM LEADEI 
rm | 


LEAD ENGINEER — Op 


Software \ 


GE Energy 


\ 
imagination at work % 


yrs 
applic 
Adabas 


stated 


report distrib 


database management 
grammi 

Cold Fusion. 

C++, Net 

Salary competitive 
Bachelor's degree in 
ment Information Syst 
related field Employer 
accept Master's degree in lieu 
Bachelor's. Educational back 
ground must have included 
above listed mputer skills 
Send resume to Ms. Vogelien 
HR, UPS, 1600 Cottonwood St 


Charlotte, NC 28206 


sated 


a bachelor's degre: 
be assigned t 
pated client sites throu 
United States. Salary 


Boston, MA 02114 
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Peter Smith, Wet IF t ma 
Kevin Gerich, Mark Saver Web de 
Bill Rigby, a € 
Matthew Moring, Va 


How to Contact 


COMPUTERWORLD 


We invite readers to call or write with their comments 
and ideas. It is best to submit ideas to one of the department 
editors and the appropriate beat reporter. 


GENERAL INFORMATION 


TELEPHONE/FAX 


Main phone number. . . . (508) 879-0700 
All editors unless otherwise noted below 
RESEARCH 
Mari Keefe, research 
Gussie Wilson, : 


24-hour news tip line. . . (508) 620-7716 
E-MAIL 
Our Web address is 
Michele Lee DeFilippo, www.computerworld.com. 
saadaenaanindi aiiieelantiantind 508) 271-8015 Staff members’ e-mail follows this form: 
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Microsoft Draws Interest 
With Speech ‘Technology 


Uses lower price 
a selling point to 
unseat competition 


BY CAROL SLIWA 
SAN FRANCIS 
EEKING TO push voice- 
recognition technology 
into the mainstream, 
Microsoft Corp. last 
week pointed to signs of en- 
couragement as it launched 
Speech Server 2004 here. 
Early adopters that worked 
with consultants using betz 
versions of Microsoft’s maid- 
en speech software product 
have either gone live with ap- 
plications that can recognize 
speech responses or will soon | 
move beyond the pilot phase. 
They said their experiences 
indicate that they will see sig- 
nificant benefits. 
Seattle-based Grange Insur- 
ance Group predicted a 15% 
annual recurring return 
through a reduction in the 
number of calls its customer 
service representatives han- 


Continued from page 1 


EC Decision 


peudbacts, ve, the bemer it’s going 
to be for all of us, developers 
and users,” Fouch said. “As a 
software developer, you can’t 
compete with Microsoft. A lit- 
tle bit more of a level playing 
field is a good thing.” 

The European Commission 
also ordered the company to 
offer a version of the Win- 
dows operating system with- 
out its Media Player. But it’s 
the server issue that stands to 
affect corporate users. 

Microsoft’s server market 
share is about 54%, with Linux 
at 24%, according to market 
research firm IDC. The mar- 


dle, once its 150,000 policy- 
holders get a chance to use the 
new system. The company is 
currently piloting a speech- 
enabled application that lets 
750 policyholders check 
billing information over the 
telephone by recognizing their 
responses to questions. 
Grange is also letting mort- 
gage companies 
tional policy information. 


access addi- 


An Alternate Route 
CIO Ralph Carlile said Grange 
had planned to make the infor- 
mation accessible through 
Web-based applications. But 
he said that once he learned 
that his company would be 
able to reuse the development 
work to also make the infor- 
mation accessible via tele- 
phone by speech-enabling the 
applications, he jumped at the 
chance to participate in Mi- 
crosoft’s joint development 
program for Speech Server. 
The rationale for adopting 
Speech Server was similar for 
the Southwest Alabama Inte 


ket shares of both Linux and 
Windows are growing at the 
expense of Unix, NetWare 
and other server operating 
systems. 

Critics of Microsoft contend 
that the company preserves 
certain functionality between 
its servers and desktops that 
isn’t available for Unix- or 
Linux-based servers. Since 
those servers may need to in- 
teract directly with a Win- 
dows server, such as when 
providing single sign-on ser- 
vices to multiple environ- 
ments, having server-to-server 
interoperability is important. 

Lee Patch, vice president of 
legal affairs at Sun Microsys- 
tems Inc., said the commis- 
sion’s decision sets full inter- 


grated Criminal Justice Sys- 
tem. SAICS used Microsoft's 
Visual Studio .Net develop- 
ment tools to build applica- 
tions that would provide Web 
browser-based access to dri- 
Social Security, 
license plate and other infor- 
mation. But police officers on 
bicycles and patrol boats don’t 


ver’s license, 


always have access to comput- 
ers, so the prospect of letting 
them get information through 
voice inquiries made via cell 
phones was interesting to Jim 
Pritchett, executive director of 
Foley, Ala.-based SAICS. 

“We were able to take the 
development tool, Visual Stu- 
dio, that we were using and 
initiate the speech application 
just by building the linkages,” 
Pritchett said. “We don’t have 
to train anybody on anything 
different.” 

Microsoft is promoting 
the lower price of its speech- 
recognition technology to set 
its offering apart from those of 
competitors such as Nuance 


Communications Inc., ScanSoft 


operability “as the standard 
for competition.” 

However, Dan Kusnetzky, an 
analyst at IDC, said it may 
take 12 to 24 months for rival 
vendors to incorporate Micro- 
soft’s APIs, and they may balk 
at paying additional license 


As a software 

developer, 
you can’t compete 
with Microsoft. A 
little bit more of a 
level playing field is 
a good thing. 


JAVED FOUCH, PROGRAMMER 
HAGERTY INSURANCE 


Inc. and IBM. But one prom- 
inent user pointed out that 
price isn’t the most important 
criterion when weighing 


speech-recognition technology. 


“The most important thing 
for me in any speech applica- 
tion is the power and the 
strength of the speech recog- 
nition,” said Fari Ebrahimi, an 
Arlington, Va. 
vice president in IT at Verizon 
Communications. “What mat- 
ters is, Are we going to give 
customers an experience 
they'll really enjoy and [make 
them] feel that we care about 


-based senior 
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them? There’s no price to put 
on that.” 

was a factor for SAICS, 
which piloted Nuance’s prod 
for Micro 


d that by us 


Cost 


uct before opting 
soft’s. Pritchett sai 
ing its familiar Visual Studio 
environment, SAICS was able 
jen 


to develop and deploy its ap 


plication using ech Server 
for at least 50% lower cost 

and in a quarter of the time 
But Pritch 


comparisons are 


ett added that price 
tricky, 
SAICS got favorable treatment 
through Microsoft's early 


adopter program. @ 45782 
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= Speech Application Language Tags interpreter: A 
for the telephone. The voice browser runs on 
manages interactions among the t 


the spee 


phone user, the 


the Web server running the applica 


canSoft 


® Standard Edition: $7,999 per proc 
concurrent telephone connections pé 


= Enterprise Edition: $17 999 per proc 


connections per server 


fees and choose to live with 
existing work-arounds. Micro- 
soft could also add features 
that require constant API up- 
dating, he said. 

The details of just what Mi- 
crosoft will be required to do 
won't be available for weeks 
under the commission’s pro- 
cedures. Despite the call for 
“full interoperability,” the or- 
der isn’t requiring disclosure 
of source code, just interface 
documentation such as APIs. 
“So Microsoft has a role in the 
determination of what’s need- 
ed,” said Mark Ostrau, an anti- 
trust attorney at Fenwick & 
West LLP in Palo Alto, Calif. 

Microsoft plans to fight the 
decision. Brad Smith, the com- 
pany’s chief legal counsel, said 


that in forcing the company 

to disclose server protocols, 
the European Commission is 
asking it to give valuable parts 
of its intellectual property to 
competitors. 

Although Microsoft’s appeal 
may take three to five years, 
the company could still be 
forced to comply with last 
week’s ruling by late this year. 
Microsoft is expected to ask 
the commission 
the remedy until the 
complete; a decision on that is 


expected this fall. @ 45778 
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appeal is 
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Unbundled Future 


T’S OLD NEWS BY NOW: The European Commission has 
slapped Microsoft with a fine of 497 million euros and given 
the company a few months to strip its Media Player out of 
Windows and disclose the Windows server interfaces (see 
story, page 1). Heck, it was already old news even before the 
official announcement, since word leaked out almost a week early. 
The short-term word to corporate IT departments is old news, 
too: When a vendor is under fire, negotiate for better terms. If you 


can, leverage Microsoft’s 


Is that a brutally tactical view? Sure. Is it in 
Microsoft’s best interest? Maybe not. But you’re 
not working for Microsoft. And Microsoft — or 
any other vendor — would soak you if the situ- 
ation was reversed. 

You're not willing to negotiate hard with 
Microsoft at a time like this? Then don’t com- 
plain about Microsoft’s prices or terms. That’s 
true of every other vendor, too — IBM, Dell, 
SAP, Hewlett-Packard, Oracle, Cisco, Sun, 
right down to the smallest players. Either you 
take your opportunities, or you accept what 
vendors dictate. 

OK, that’s the story for the short term. But 
what does the Europeans’ decision to slap 
Microsoft mean a little further out? 

It might not mean anything. It might mean a 
seismic shift in the balance of power in the soft- 
ware business (but it won’t). Or it might mean 
good news for Microsoft and all its customers. 

What if Microsoft appeals and wins? Nothing 
changes. No impact. 

Or what if Microsoft just has to pay the fine 
but doesn’t have to limit what it bundles into 
Windows? The fine is about 1% of Microsoft’s 
current 

What if Microsoft loses 
knuckling under, decides to walk 
away from Europe? Huge impact — 


pile of cash. No impact. 
and, instead of 


Microsoft’s revenue would immedi- 
ately drop by 30%. But that won’t 
happen, if only because Linux 
would instantly become the de facto 
standard in Europe. Microsoft 
would pay any fine and gut Win- 
jows of any bundling rather than 
cede a third of the world to Linux. 
Or — here’s a wild idea — what if 


troubles to get a sweeter deal. 


years has been based on bundling. First it was 
Microsoft Basic bundled with early desktop 
computers. Then customized versions of MS- 
DOS bundled with early PC-not-quite-compati- 
bles. Then MS-DOS bundled with virtually 
every PC, then Windows and Office bundled 
with PCs, then Web browsers and media play- 
ers bundled with Windows. 

Microsoft has searched for new business 
lines for years. But there’s never been any ur- 
gency — everyone in Redmond knows that only 
Windows and Office have to make money. Any- 
thing else can be bundled or piggybacked or 
“integrated” with those products. 

But what if Microsoft decided to light a fire 
under its employees and cut the legs out from 
under its antitrust foes with a single stroke? 
What if Microsoft abandoned integration and 
simply made great add-on products that 
worked better than those of its competitors? 

Suddenly, every product group in Redmond 
would be under the gun to get it right the first 
time. And leapfrog the competition. And listen 
to customers. And market like crazy. 

Stripped of that bundling cushion, Microsoft 
products would have to get a lot better, a lot 
faster, on their own. Competitors would have to 
get better faster, too. The whole in- 
dustry would have to get sharper. 

The culture of Microsoft would 
be revolutionized. Microsoft em- 
ployees would become aggressive 
competitors instead of defensive 
monopolists. They’d have to — or 
they’d be gone. 

And with no more bundling, the 
biggest antitrust accusation against 
Microsoft would be gone, too. 





A Little Too Impressive 

New company president sets up an IT task force to 
cut the large number of hard-copy reports printed 
every month. For the meeting to announce the team's 
findings, team member pilot fish loads two mailroom 
carts with sample reports to demonstrate the waste. 
And that does make an impression on the assembled 
execs, fish says: “The distribution of hard-copy reports 
is increased, after some of the VPs realize what 


od been missing.” 


so 
for a small town 
ea 
about 30 


neal tosses 
with a really tight bud- 
get. reports a pilot fish 
there. “They don’t need 


SHARK 
TANK 


Cutting 
Edge 

After two IT 
departments 
merge, there’s 


; anew procedure for 

: Changing user permis- 
: sions. No more just ask- 
: ing the server guy, says 
: pany intranet, fill it in by 
: hand and fax it to IT. “I 
i joked that it was some- 
: what laborious for a cut- 


: company,” says fish. So 
i “Instead of faxing it,” 

? fish says, “I'm now al- 
: lowed to scan the com- 
: pleted form in and send 
: it to them as an e-mail 
: attachment.” 


: Smells Like 

: Upgrade Time 

: When support techs ar- 
: rive to work on a PC that 


“needs attention,” they 


: find it covered in blobs 

: of dark, foul slime. “Ap- 
: parently a blocked over- 
? the desk and occupant in 
: its contents,” reports a 
? pilot fish on the scene. 

: “They called us out to 

: see if we would take the 
: PC apart and clean it out 


"time to give the user an 


FEED THE SHARK! Send your true tale of IT life to 


sharky@computerworld.com. You snag a snazzy 
Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 


FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes@computerworld.com. 


Best of all, IT shops would get 


Microsoft loses and then gets seri- 
the benefit of all those better, com- | 


ous about competing? 
It could happen. True, Microsoft’s 
business strategy for almost 30 


petition-honed products. 
That would be news. @ 45743 
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racle Database 10g 


149 Per User 


One CD 
17 minute install 
Easy to use 


Oracle Standard Edition One 
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oracle.com/standardedition 
or call 1.800.633.0753 


Limitations and restrictions apply. Standard Edition One is available with Named User Plus licensing at $149 per user with a minimum of five users or $4995 per 
processor. Licensing of Oracle Standard Edition One is permitted only on servers that have a maximum capacity of 2 CPUs per server. 17 minute install 
is based upon testing on a system with 1x866MHz Intel CPU, 512 Mb RAM running Red Hat Linux 2.1. Actual install times will vary 
and are dependent on system configurations. For more information, visit oracle.com/standardedition 





l= 


tee 
Wes Ws hs 





